tomvangoethem

BugHog

Powerful framework for pinpointing bug lifecycles in web browsers.

wcde

Implementation of the Web Cache Deception detection methodology presented in the paper "Web Cache Deception Escalates!"

embedding-requires-opt-in

Embedding a document (via `<iframe>`, etc) should require explicit opt-in from the embedee.

crypto-attacks

Python implementations of cryptographic attacks and utilities.

ephemeral-fingerprinting

Problem statement and basic mitigations for ephemeral fingerprinting on the web.

carbon

:black_heart: Create and share beautiful images of your source code

tcpscaler

libevent-based client and server, designed to explore the limit of a TCP-based server with a *huge* number of clients

adsphd

KU Leuven Arenberg Doctoral School PhD dissertation latex class

APL

Explore your data and find cluster-specific genes using Association Plots

0xbadc0de

A Tale of Two Worlds: Assessing the Vulnerability of Enclave Shielding Runtimes

privacy-model

A Potential Privacy Model for the Web: Sharding Web Identity

tranco-python-package

Python package to access the Tranco list

navex

firefox-data-store-docs

INACTIVE - http://mzl.la/ghe-archive - Repo containing documentation regarding Firefox data stores across all platforms

poodle-PoC

:poodle: Poodle (Padding Oracle On Downgraded Legacy Encryption) attack CVE-2014-3566 :poodle:

CRIME-poc

:hocho: CRIME attack PoC : a compression oracle attacks CVE-2012-4929 :hocho:

Iroh

Dynamic code analysis tool - Exploit, record and analyze running JavaScript

DomainRecon

Based on URL and Organization Name, collect the IP Ranges, subdomains using various tools like Amass, subfinder, etc.. And check for uphost and Run Masscan to grap CNAME entries, take the screenshot of all the found subdomains using WebScreeShot and more...

DLWF

Source code for our NDSS'18 paper "Automated Website Fingerprinting through Deep Learning"

hosts-blocklists

Automatically updated, moderated and optimized lists for blocking ads, trackers, malware and other garbage

sancus-core

Minimal OpenMSP430 hardware extensions for isolation and attestation

security-research-pocs

Proof-of-concept codes created as part of security research done by Google Security Team.

writeups

stuff

chrome-extensions-archive

:pager: Archive all the chrome extensions (until Feb 4. 2019)

chrome-remote-interface

Chrome Debugging Protocol interface for Node.js

iodine

Official git repo for iodine dns tunnel

tor-browser-selenium

Tor Browser automation with Selenium.

Metadata-Attacker

A tool to generate media files with malicious metadata

awesome-bug-bounty

A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature