NDevTK

pyscript

Try PyScript: https://pyscript.com Examples: https://tinyurl.com/pyscript-examples Community: https://discord.gg/HxvBtukrg2

trufflehog

Find and verify secrets

pyodide

Pyodide is a Python distribution for the browser and Node.js based on WebAssembly

unredacter

Never ever ever use pixelation as a redaction technique

dalfox

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

privacyguides.org

Protect your data against global mass surveillance programs.

awesome-google-vrp-writeups

🐛 A list of writeups from the Google VRP Bug Bounty program

noscript

The popular NoScript Security Suite browser extension.

Run-in-Sandbox

Run PS1, VBS, CMD, EXE, MSI, Intunewin, MSIX, or extract ISO, ZIP in Windows Sandbox very quickly just from a right-click

extension-detector

Check how trackable you are based on your browser extensions.

certmitm

A tool for testing for certificate validation vulnerabilities of TLS connections made by a client device or an application.

chrome-bandit

Programmatically extract saved passwords from Chromium based browsers.

blog-indexeddb-safari-leaks-demo

Demo showcasing information leaks resulting from an IndexedDB same-origin policy violation in WebKit.

TCC-ClickJacking

A proof of concept for a clickjacking attack on macOS.

fcors

An experimental CORS middleware library for Go. Consider using jub0bs/cors (its successor) instead.

XSLeaker

Searcher for cross-site leaks (XS-Leaks)

xsinator.com

XS-Leak Browser Test Suite

same-origin-xss

Same Origin XSS challenge

nathanfarlow

Pokemon on your GitHub profile!

CVE-2022-32883

Turning Your Computer Into a GPS Tracker With Apple Maps

deprecating-document-domain

`document.domain` intentionally weakens the only security boundary we have. Perhaps we can dump it?

xs-observations

Find leaky observation channels in browsers and XS-Leaks on websites

Partitioning-visited-links-history

A proposal to partition :visited link history by top-level site and frame origin.

AutoLeak

Find XS-Leaks in the browser by diffing DOM-Graphs in two states

why-is-sb-down

Why is SponsorBlock down?!

2022AprilFools

Based on https://github.com/ajayyy/SponsorBlockSite

LeakuidatorPlus

Leakuidator+ helps users to protect themselves against cross-site leaks, a class of vulnerabilities derived from side-channels built into the web platform.

poolparty

BatchOS

ThomasOrlita