Developer-first error tracking and performance monitoring

The most advanced open-source browser fingerprinting library

HTML Standard

The password hash Argon2, winner of PHC

Hackable Markdown Editor and Viewer (WIP)

DNS over HTTPS config profiles for iOS & macOS

Manages application of security headers with many safe defaults

Fetch Standard

Bridge API to connect with existing Java APIs.

The Nu Html Checker (vnu)

DOM Standard

Application Layer DoS attack simulator

Version 1.2. This is the source code to STUNTMAN - an open source STUN server and client code by john selbie. Compliant with the latest RFCs including 5389, 5769, and 5780. Also includes backwards …

Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron applications.

ZAP Add-ons

The regex file necessary to build language ports of Browserscope's user agent parser.

A browser API to prevent DOM-Based Cross Site Scripting in modern web applications.

Repair and secure untrusted HTML

ECMAScript parser that produces a Shift format AST

Some ideas around spoofing and detecting user agents.

reverse many of the transformations applied by minifiers and naïve obfuscators

WebAppSec Content Security Policy

⏩ Shift AST Specification

MIME Sniffing Standard

WebAppSec Subresource Integrity

Parse Content Security Policy headers, warn about policy errors, safely manipulate, render, and optimise policies

Log all the CSP violations!

H2HC 2017 Slides/Materials/Presentations

нерегулярный подкаст о жизни ресечеров по обе стороны океана