client-side-security

Understand Software. Architecture intelligence + client-side security for any web app, right in your browser. Local-first Chrome (MV3) extension.

Some Generic Browser Exploits (For Educational Purposes Only)

Unpacked Telegram web app for research.

A high-performance, keyless, rule-based envelope for protecting web/API/stream data.

Next.js code obfuscation setup using webpack-obfuscator – secure and protect your production builds.

Vollständige Webanwendung für OpenPGP-Verschlüsselung, basierend auf React, TypeScript und openpgp.js.

The 'CyberGuard' delivers a modular, multi-layer security system for modern web applications. It bundles client-side anomaly detection, DDoS-Guard, DOM protection, input shielding, service-worker hardening and UI blackout controls into one compact package.

SMUGGLR is a browser-based Unicode steganography and text obfuscation toolkit for experimenting with invisible characters, homoglyphs, whitespace ciphers, and Unicode-based payload hiding techniques — all fully client-side with zero network calls. 🔓

ClientVault is a lightweight, in-page web security tool that lets you inspect, analyze, and manage all client-side storage used by a website — including cookies, localStorage, sessionStorage, and more. Built for developers, pentesters, and bug bounty hunters.

Client-side History API abuse, shown as a safe educational PoC

EntropyKey is a web application that generates unique and secure tokens using your device's camera. The randomness in the video feed helps create unpredictable tokens, making them suitable for passwords or other secure identifiers.

Website proptection tool beyond a captcha solver. Lightweight JavaScript site protection library that secures forms without traditional CAPTCHA challenges. Advanced client-side site protection tool that goes beyond traditional CAPTCHA by preventing automated form abuse and bot submissions.

Proof of Concept (PoC) demonstrating Clickjacking vulnerability risks on the CEX.IO profile page. Web security research and UI/UX vulnerability analysis.

Frontguard by Pubflow CLI scans frontend builds, public URLs, localhost apps, HAR files, and interactive browser traffic for client-side exposure risks.

Feroot Security is a Toronto-based cybersecurity company providing AI-powered client-side (browser) security and compliance automation for websites and mobile apps. Its platform gives organizations visibility into the third-party JavaScript, trackers, cookies, and data flows running in the browser, and automates compliance with PCI DSS 4.0.1…

AI-driven dynamic client-side encryption system. Application-layer security with language-agnostic reverse proxy, replay protection, and client-side payload validator.

c/side (cside) is a client-side security platform that detects script attacks, AI agents, account takeover, and fraud at the browser layer. It provides active runtime detection that watches what third-party scripts, users, and agents actually do as they execute in the live browser session, in real time, rather than relying on static scans or…

Ensighten is an enterprise tag management, data governance, and client-side website security platform. It gives digital, marketing, and privacy teams centralized control over the third-party tags, scripts, and vendor code that run on their web and mobile properties, enforcing consent and privacy rules (GDPR, CCPA) at the point of data collection.

PhantomPath is a client-side utility designed to demonstrate various techniques used to structurally obfuscate URLs. In the field of cybersecurity, understanding how an attacker can mask a malicious destination is crucial for developing robust defense mechanisms and training users in link analysis.

A lightweight client-side wallet for Solana and Ethereum with seed generation, key derivation, multi-account support, and balance lookups.