Some Generic Browser Exploits (For Educational Purposes Only)
-
Updated
Jan 12, 2022 - HTML
#
client-side-security
Here are 18 public repositories matching this topic...
An educational phishing simulation login page demonstrating how fake UIs capture user credentials. It logs inputs, stores them locally, and emails the captured data for awareness training. Intended strictly for controlled, ethical use to teach URL verification and phishing prevention.
web-security html-css-javascript ethical-hacking social-engineering login-page client-side-security security-education phishing-awareness cybersecurity-awareness phishing-simulation
-
Updated
Oct 23, 2025 - CSS
A polished, accessible client-side password strength checker that estimates entropy, detects weak patterns, and provides actionable suggestions. Includes a built-in password generator, works fully offline with no network calls, and uses ARIA live updates for accessibility. Ideal for demos, portfolios, or frontend components.
javascript github-pages entropy frontend accessibility password-strength client-side beginner-friendly html-css-javascript learning-project client-side-security static-web-app password-security frontend-javascript regex-validation cybersecurity-basics web-security-basics
-
Updated
Feb 13, 2026 - JavaScript
A high-performance, keyless, rule-based envelope for protecting web/API/stream data.
javascript security obfuscation browser crypto encryption npm-package typescript-library web-security client-side-security api-security frontend-security fise webapp-security
-
Updated
Dec 1, 2025 - JavaScript
Unpacked Telegram web app for research.
javascript webpack static-analysis reverse-engineering devtools penetration-testing web-security source-map telegram-web security-research client-side-security esbuild bundle-analysis
-
Updated
Jun 21, 2025 - TypeScript
Next.js code obfuscation setup using webpack-obfuscator – secure and protect your production builds.
nodejs javascript security obfuscation obfuscate typescript webpack nextjs obfuscator literal client-side-security frontend-security webpack-obfuscator code-obfuscation nextjs-configuration
-
Updated
Apr 7, 2025
ClientVault is a lightweight, in-page web security tool that lets you inspect, analyze, and manage all client-side storage used by a website — including cookies, localStorage, sessionStorage, and more. Built for developers, pentesters, and bug bounty hunters.
jwt userscript devtools cookies localstorage sessionstorage bug-bounty tampermonkey web-security pentesting security-research client-side-security browser-security ethical-testing storage-inspection
-
Updated
Apr 7, 2026 - JavaScript
Vollständige Webanwendung für OpenPGP-Verschlüsselung, basierend auf React, TypeScript und openpgp.js.
react cryptography typescript encryption pgp rsa openpgp react-app web-crypto public-key-cryptography privacy-tools client-side-security crypto-tools javascript-crypto secure-messaging
-
Updated
Mar 30, 2026 - TypeScript
The 'CyberGuard' delivers a modular, multi-layer security system for modern web applications. It bundles client-side anomaly detection, DDoS-Guard, DOM protection, input shielding, service-worker hardening and UI blackout controls into one compact package.
javascript monitoring npm-package rate-limiting cybersecurity web-security performance-monitoring ddos-protection security-tools anomaly-detection anti-debugging client-side-security error-tracking threat-detection frontend-security security-analytics npm-packages bylickilabs dom-protection defensive-coding
-
Updated
Dec 12, 2025
Client-side History API abuse, shown as a safe educational PoC
javascript proof-of-concept single-page-app pushstate cybersecurity web-security offensive-security browser-history red-team history-api web-application-security security-research client-side-security popstate browser-security frontend-security attack-simulation navigation-behavior ui-security ux-security
-
Updated
Apr 22, 2026 - HTML
SMUGGLR is a browser-based Unicode steganography and text obfuscation toolkit for experimenting with invisible characters, homoglyphs, whitespace ciphers, and Unicode-based payload hiding techniques — all fully client-side with zero network calls. 🔓
cybersecurity steganography web-security zero-dependency offensive-security red-team data-hiding social-engineering security-research client-side-security browser-security invisible-characters payload-obfuscation zero-width-characters text-obfuscation unicode-security unicode-steganography homoglyph-attacks whitespace-ciphers encoding-exploitation
-
Updated
May 13, 2026 - HTML
EntropyKey is a web application that generates unique and secure tokens using your device's camera. The randomness in the video feed helps create unpredictable tokens, making them suitable for passwords or other secure identifiers.
javascript bootstrap open-source security html5 entropy css3 password-generator web-application randomness camera-api token-generation client-side-security frontend-development randomness-generation random-token-generator secure-tokens
-
Updated
Jul 27, 2024 - HTML
Frontguard by Pubflow CLI scans frontend builds, public URLs, localhost apps, HAR files, and interactive browser traffic for client-side exposure risks.
-
Updated
May 15, 2026 - TypeScript
Website proptection tool beyond a captcha solver. Lightweight JavaScript site protection library that secures forms without traditional CAPTCHA challenges. Advanced client-side site protection tool that goes beyond traditional CAPTCHA by preventing automated form abuse and bot submissions.
web-security spam-prevention anti-bot captcha-alternative client-side-security form-security website-protection bot-protection security-library client-side-protection captcha-slover captcha-tool captcha-free
-
Updated
Mar 31, 2026 - HTML
HUMAN Security — bot mitigation + ad fraud (formerly PerimeterX)
application-security perimeterx fraud account-takeover client-side-security bot-mitigation edge-security bot-defender ad-fraud javascript-sensor
-
Updated
May 23, 2026
AI-driven dynamic client-side encryption system. Application-layer security with language-agnostic reverse proxy, replay protection, and client-side payload validator.
cryptography encryption client-side-security ai-security moving-target-defense application-layer-encryption llm-fine-tuning replay-protection
-
Updated
May 19, 2026 - JavaScript
A lightweight client-side wallet for Solana and Ethereum with seed generation, key derivation, multi-account support, and balance lookups.
react ethereum ed25519 web3 hd-wallet crypto-wallet bip39 secp256k1 client-side-security mnemonic-phrase key-derivation solana multi-chain framer-motion
-
Updated
Dec 6, 2025 - JavaScript
PhantomPath is a client-side utility designed to demonstrate various techniques used to structurally obfuscate URLs. In the field of cybersecurity, understanding how an attacker can mask a malicious destination is crucial for developing robust defense mechanisms and training users in link analysis.
cybersecurity educational web-security offensive-security red-team threat-analysis link-analysis social-engineering security-research client-side-security security-awareness browser-security frontend-security phishing-detection training-tool malicious-links javascript-security cyber-awareness url-analysis url-obfuscation
-
Updated
Mar 15, 2026 - HTML
Improve this page
Add a description, image, and links to the client-side-security topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the client-side-security topic, visit your repo's landing page and select "manage topics."