eyalsec

Here are 3 public repositories matching this topic...

EyalSec / es-chromium

es-chromium: a Chromium build that tracks attacker-controlled data through V8 and Blink and reports DOM-XSS as a flow, not a guess. The browser agent behind EyalSec.

javascript security xss chromium dom-xss browser-security runtime-security taint-tracking eyalsec es-chromium

Updated Aug 14, 2026

EyalSec / vulnerable-javascript

Star

Intentionally vulnerable single-page dashboard demonstrating es-chromium DOM-XSS taint tracking - 21 flows across 8 sources and 18 sinks, each reachable from one URL. Demo target only.

javascript security demo xss appsec dom-xss vulnerable-application taint-tracking eyalsec es-chromium

Updated Sep 1, 2026
JavaScript

EyalSec / vulnerable-python

Star

Intentionally vulnerable Python app demonstrating EyalSec runtime taint tracking - one endpoint per source-to-sink vulnerability. Isolated lab use only.

python security demo injection owasp vulnerable-application runtime-security taint-tracking eyalsec es-python

Updated Sep 7, 2026
Python

Add this topic to your repo

To associate your repository with the eyalsec topic, visit your repo's landing page and select "manage topics."

Learn more