cookie-security

PoliteWebScanner is a learning-grade web vulnerability scanner plus AI-assisted report viewer. It crawls safely (queue-based, robots-aware, rate-limited), detects common issues (security headers, cookie flags, reflected XSS heuristics, SQL error patterns), and exports human-friendly JSON/HTML reports with optional AI help for triage and remediation

Device Bound Session Credentials (DBSC) for Node.js — middleware that binds session cookies to a hardware TPM key to stop cookie theft, with a Web Crypto polyfill for Firefox & Safari.

🍪 Cookie Security Lab - A comprehensive CTF challenge demonstrating 6 cookie vulnerabilities with hands-on exploitation exercises, hashed flags, and secure patterns for learning.

Framework-neutral session binding for Node.js. Make stolen session cookies harder to reuse.

Darkly – hands-on examples of common web security vulnerabilities.

OWASP security HTTP header checker - scan response headers, validate values, analyze cookies & CORS, replay raw Burp requests, A+ to F scoring, GUI + CLI with SARIF/CI exports

Hands-on browser security labs — SOP, CORS, CSP, SRI, Cookie flags & MitM attacks | Node.js

Captures and logs browser cookies for devs who need lightweight session debugging tools