This research paper introduces some new and currently working techniques to bypass the SOP and CORS mechanisms in current browsers.

Deep DOM fuzzer for browser fuzzing.

A performant general purpose fuzzer written in Rust. Used to discover several vulnerabilities in medical software and browsers via web fonts.

An advanced data mutation fuzzer.

webROP is testing the security of input validation filters and web application firewalls.

Some interesting webROP eggs discovered in our research while creating webROP.

A demonstration how a XSS vulnerability in WordPress can be turned into RCE with a reverse shell.