Avatar

Taxonomy

Node

Rust

JavaScript

README.md

In this repository we provide code snippets and tools that were created as a byproduct of our research or penetration testing work. The codes can be used for learning purposes and to get a better understanding about cyber security and in-depth vulnerability analysis.

Popular projects

  1. Bypassing origin policies to exploit local network devices
    This research paper introduces some new and currently working techniques to bypass the SOP and CORS mechanisms in current browsers.

  2. ddfuzz
    Deep DOM fuzzer for browser fuzzing.

  3. genfuzz
    A performant general purpose fuzzer written in Rust. Used to discover several vulnerabilities in medical software and browsers via web fonts.

  4. isotope
    An advanced data mutation fuzzer.

  5. webROP
    webROP is testing the security of input validation filters and web application firewalls.

  6. webROP eggs
    Some interesting webROP eggs discovered in our research while creating webROP.

Less
More

Activity