The Most Advanced Client-Side Prototype Pollution Scanner
☔️A curated list of tools, articles & resources to help take your frontend security to the next level. Feel free to contribute!
精选不同站点的JS逆向实例,内含详细讲解,并辅以知识点概括、加密算法、难度对比与链接跳转。涵盖补环境、扣JS、webpack与瑞数等诸多难点
Get and extract the frontend code of a SPA, finding all chunks and recreating the original code from source maps. Should support common webpack/vite configurations, but note it's still experimental.
hat is a powerful tool designed to provide secure file encryption and decryption directly within your browser. This project, primarily written in JavaScript, ensures that your sensitive data remains private by performing all encryption processes client-side, without the need for server interactions.
Demo of a secure Next.js application
Rubik is a comprehensive toolkit designed to enhance frontend security by automating common security tasks and providing valuable insights.
Hisec is a set of extremely intolerant server configs using CSP and headers.
Next.js code obfuscation setup using webpack-obfuscator – secure and protect your production builds.
Interactive demo of a prototype pollution → XSS exploit in JavaScript
A locally running file encryption service with AES-256 and Neon UI – all in the browser, without a server or backend.
Add a description, image, and links to the frontend-security topic page so that developers can more easily learn about it.
To associate your repository with the frontend-security topic, visit your repo's landing page and select "manage topics."