mgillam Goto Github PK

castle-lab

Rough prototype for the Containerized Application Security Training Lab Environment - A k8s-based solution for tenant-per-student training lab environments for application security training.

csp-tuner

Web interface for reviewing CSP violations

cvesandboxes

evil-browser-toolkit

flagstone

A vulnerable app for those taking their first steps into application security training

golden.js

Quite probably the worst anti-xss library on the planet.

htmx4pug

Extensions for the Pug template engine to support use in HTMX apps

js-cat

🐱 concatenate files

js-tap

JavaScript payload and supporting software to be used as XSS payload or post exploitation implant to monitor users as they use the targeted application. Also includes a C2 for executing custom JavaScript payloads in clients.

mgillam.github.io

repostart

Fork of degit - straightforward project scaffolding

retire.js

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

tiged

Community driven fork of degit