A list of public penetration test reports published by several consulting firms and academic security groups.

A proposal for enabling seamless navigations between sites or pages

🔪Browser logic vulnerabilities ☠️

Zero-day and N-day security vulnerability notes, analysis, and proof-of-concepts

Android application fuzzing framework with fuzzers and crash monitor.

This is an exploit for CVE-2020-0674 that runs on the x64 version of IE 8, 9, 10, and 11 on Windows 7.

full exploit of pwnfest2016, slide and full text of syscan2017

Creates seamless Spotify playlists between just about any two artists.

A web page based fuzzer that generates random JS statements then fuzz in the web-browser.

[Patched] Sandbox escape Chrome exploit. Allows the execution of local binaries, read/write functions and exfiltration of Chrome OAuth tokens to remote server. More info: https://bugs.chromium.org/…

A PoC to trigger CVE-2023-5217 from the Browser WebCodecs or MediaRecorder interface.

CVE-2021-40444 Sample