X-Frame-Options: All about Clickjacking?

This repository serves as a comprehensive archive for Cure53's security research and audit publications. It provides public access to penetration test reports, academic papers, and security tools developed by the renowned security firm, offering valuable insights into real-world vulnerabilities and defensive techniques.

Key Features

• Pentest Reports — Detailed security assessments of various software, including VPNs, crypto libraries, web applications, and mobile apps.
• White Papers — In-depth technical documents covering browser security, ECMAScript 6 for penetration testers, and clickjacking defenses.
• Academic Papers — Peer-reviewed research on topics like DOMPurify, PHP security mechanisms, second-order vulnerabilities, and scriptless attacks.
• Presentations — Slide decks from security conferences discussing browser exploitation, AngularJS abuse, DOM security, and more.
• Security Tools — Open-source tools like DOMPurify (HTML sanitizer), HTTPLeaks, and the HTML5 Security Cheatsheet.

Philosophy

Cure53 believes in transparency and knowledge sharing within the security community, making their findings publicly available to help improve software security globally.