bean5oup

molybden

Tiny fuzzer for chrome using puppeteer and domato. [ready, mostly experimental]

fuzzilli

A JavaScript Engine Fuzzer

docs

various docs (that are interesting, or not, depending on the point of view...)

js-visualizer-9000-client

A React app to interactively visualize JavaScript's Event Loop

esprima

ECMAScript parsing infrastructure for multipurpose analysis

vs-chromium

A Visual Studio extension containing a collection of tools to help contributing code to the Chromium project.

fastfuz-chrome-ext

Site fast fuzzing with chorme extension.

Unreal.js

Unreal.js: Javascript runtime built for UnrealEngine

AnyChart

AnyChart is a lightweight and robust JavaScript charting solution with great API and documentation. The chart types and unique features are numerous, the library works easily with any development stack.

chrome-extensions-samples

Chrome Extensions Samples

public-writeup

CTF write-ups by Plaid Parliament of Pwning

TOR-0day

JavaScript exploit : Firefox version 41 - 50 are affected. Easy fix by disabling JavaScript (use NoScript for better leverage). Victim must visit website using correct version of Tor in order to be potentially deanonymized.

pwndbg

Exploit Development and Reverse Engineering with GDB Made Easy

browser-pwn

An updated collection of resources targeting browser-exploitation.

WebKit

Home of the WebKit project, the browser engine used by Safari, Mail, App Store and many other applications on macOS, iOS and Linux.

Fuzzing101

An step by step fuzzing tutorial. A GitHub Security Lab initiative

ctf-archives

CTF Archives: Collection of CTF Challenges.

lua-5.4.4-sandbox-escape

learning-v8

Project for learning V8 internals

PlayStation4-Hacking-Guideline

tutorial-docker

ctf-writeups

Perfect Blue's CTF Writeups

CTF-browser-challenges

Collection of browser challenges

v8

The official mirror of the V8 Git repository

defcon28

chrome-sbx-db

A Collection of Chrome Sandbox Escape POCs/Exploits for learning

awesome-browser-exploit

awesome list of browser exploitation tutorials

js-vuln-db

A collection of JavaScript engine CVEs with PoCs

virtualbox-cve-2018-2844

denyhosts

Automated host blocking from SSH brute force attacks