Javascript Security

Javascript Mallware CollectionJavaScript

A collection of nearly 40,000 JavaScript malware samples for security research and analysis.

box-jsJavaScript

A utility for analyzing and studying malicious JavaScript by emulating a Windows JScript environment.

Prototype pollution attack in NodeJS applicationJavaScript

Research presentation and paper analyzing prototype pollution attacks in Node.js, presented at NorthSec 2018.

Cyclops

A Chromium-based web browser with built-in XSS detection and taint tracking capabilities for security testing.

ember-cli-sriJavaScript

Generates Subresource Integrity (SRI) hashes for Ember applications to secure JavaScript and CSS loaded from CDNs.

ReDoSDetectorTypeScript

An ESLint plugin that detects vulnerable regular expressions susceptible to ReDoS attacks.