awesome list of browser exploitation tutorials
-
Updated
Sep 18, 2023
#
browser-exploitation
Here are 18 public repositories matching this topic...
The Serverless Blind XSS App
-
Updated
Mar 28, 2026 - JavaScript
WRAITH — a modern browser-hooking framework (BeEF + blind-XSS successor) for red teams, researchers, and educators. For authorized security testing, research & education only.
security phishing xss penetration-testing beef offensive-security red-team security-tools blind-xss browser-exploitation man-in-the-browser security-education
-
Updated
Aug 1, 2026 - JavaScript
A collection of curated resources and CVEs I use for research.
-
Updated
Aug 8, 2021 - C++
Chakra Type Confusions - PoCs of Edge's legacy JS engine vulnerabilities that inject code into the JIT process
-
Updated
Mar 26, 2024 - JavaScript
Exact-build Chrome M150 V8/JSPI sandbox escape PoC used to recover a Google v8CTF flag
-
Updated
Aug 26, 2026 - HTML
a browser exploitation framework which also has mitm phishing
-
Updated
Apr 16, 2026 - HTML
Webkit Browser Exploitation Framework written in Javascript
-
Updated
Mar 3, 2019 - JavaScript
Tribell Edge Sandbox Escape - PoCs of Edge's legacy vulnerabilities BadgeUpdateManager / TileFlyoutUpdateManager / ToastNotificationManager to exploit cross-boundary XmlDocument sharing and escape Edge’s LPAC sandbox (CVE-2019-0555).
-
Updated
Aug 3, 2025 - JavaScript
Bypass CSP nonce on Mozilla Firefox from Javascript
javascript firefox csp browser hack exploit mozilla safari hacking poc content-security-policy vulnerability security-vulnerability cve mozilla-firefox nonce gotcha csp-parser browser-exploitation
-
Updated
May 10, 2022 - PHP
CVE-2026-5281 (Chrome Dawn WebGPU UAF) analysis, lab validation tools, and reproducible environment for vulnerable vs patched builds.
-
Updated
Apr 7, 2026 - Python
Ultimate DOM Clobbering Cheat Sheet - 100+ exploitation vectors for XSS, CSP bypass, and client-side attacks. Covers browser compatibility, framework evasion, and real-world exploit chains for security researchers and bug bounty hunters
ssr hacking xss owasp cheatsheet penetration-testing web-security ctf bugbounty dom-xss offensive-security ethical-hacking htb hackthebox browser-exploitation dom-clobbering csp-bypass dom-hacking hydration-react dom-clobbering-cheatsheet
-
Updated
Dec 2, 2025
Browser-based port scanning for fun and profit! 🥳👌
penetration-testing web-security port-scanner network-security port-scanning browser-exploitation network-exploitation
-
Updated
Jan 19, 2023 - JavaScript
WRAITH — a modern browser-hooking framework (BeEF + blind-XSS successor) for red teams, researchers, and educators. For authorized security testing, research & education only.
security phishing penetration-testing beef offensive-security red-team blind-xss browser-exploitation man-in-the-browser security-education
-
Updated
Sep 16, 2026 - JavaScript
A curated archive of browser exploitation CTF challenges, initially focused on V8/d8, documenting bugs, exploitation primitives, techniques, and writeups.
-
Updated
Oct 15, 2026 - JavaScript
Add this topic to your repo
To associate your repository with the browser-exploitation topic, visit your repo's landing page and select "manage topics."