client-side-security

Understand Software. Architecture intelligence + client-side security for any web app, right in your browser. Local-first Chrome (MV3) extension.

An educational phishing simulation login page demonstrating how fake UIs capture user credentials. It logs inputs, stores them locally, and emails the captured data for awareness training. Intended strictly for controlled, ethical use to teach URL verification and phishing prevention.

Some Generic Browser Exploits (For Educational Purposes Only)

A polished, accessible client-side password strength checker that estimates entropy, detects weak patterns, and provides actionable suggestions. Includes a built-in password generator, works fully offline with no network calls, and uses ARIA live updates for accessibility. Ideal for demos, portfolios, or frontend components.

CWE-602 客户端鉴权脆弱性白盒审计方法论与纵深防御加固研究框架

Unpacked Telegram web app for research.

Next.js code obfuscation setup using webpack-obfuscator – secure and protect your production builds.

The 'CyberGuard' delivers a modular, multi-layer security system for modern web applications. It bundles client-side anomaly detection, DDoS-Guard, DOM protection, input shielding, service-worker hardening and UI blackout controls into one compact package.

Vollständige Webanwendung für OpenPGP-Verschlüsselung, basierend auf React, TypeScript und openpgp.js.

SMUGGLR is a browser-based Unicode steganography and text obfuscation toolkit for experimenting with invisible characters, homoglyphs, whitespace ciphers, and Unicode-based payload hiding techniques — all fully client-side with zero network calls. 🔓

ClientVault is a lightweight, in-page web security tool that lets you inspect, analyze, and manage all client-side storage used by a website — including cookies, localStorage, sessionStorage, and more. Built for developers, pentesters, and bug bounty hunters.

Bounded served-HTML script inventory for PCI payment pages. Fail CI on observed hosts outside your authorization list.

Frontguard by Pubflow CLI scans frontend builds, public URLs, localhost apps, HAR files, and interactive browser traffic for client-side exposure risks.

EntropyKey is a web application that generates unique and secure tokens using your device's camera. The randomness in the video feed helps create unpredictable tokens, making them suitable for passwords or other secure identifiers.

A zero-overhead client-side HTTPS enforcer module for Lydia CMS v1.0. Intercepts authorization events, prevents plain-text data leaks over HTTP, and includes automated multilingual test suites.

Client-side History API abuse, shown as a safe educational PoC

AI-driven dynamic client-side encryption system. Application-layer security with language-agnostic reverse proxy, replay protection, and client-side payload validator.

Website proptection tool beyond a captcha solver. Lightweight JavaScript site protection library that secures forms without traditional CAPTCHA challenges. Advanced client-side site protection tool that goes beyond traditional CAPTCHA by preventing automated form abuse and bot submissions.

SE·EMU is a browser-based social engineering simulation designed to help cybersecurity learners understand and practice the human side of offensive security.

Proof of Concept (PoC) demonstrating Clickjacking vulnerability risks on the CEX.IO profile page. Web security research and UI/UX vulnerability analysis.