The Most Advanced Client-Side Prototype Pollution Scanner

☔️A curated list of tools, articles & resources to help take your frontend security to the next level. Feel free to contribute!

Get and extract the frontend code of a SPA, finding all chunks and recreating the original code from source maps. Should support common webpack/vite configurations, but note it's still experimental.

精选不同站点的JS逆向实例，内含详细讲解，并辅以知识点概括、加密算法、难度对比与链接跳转。涵盖补环境、扣JS、webpack与瑞数等诸多难点

hat is a powerful tool designed to provide secure file encryption and decryption directly within your browser. This project, primarily written in JavaScript, ensures that your sensitive data remains private by performing all encryption processes client-side, without the need for server interactions.

Demo of a secure Next.js application

Hisec is a set of extremely intolerant server configs using CSP and headers.

Rubik is a comprehensive toolkit designed to enhance frontend security by automating common security tasks and providing valuable insights.

Interactive demo of a prototype pollution → XSS exploit in JavaScript

Next.js code obfuscation setup using webpack-obfuscator – secure and protect your production builds.

In this project, I developed a modern, single-page React application as part of the Airport Automation system. It provides a dynamic and responsive user experience while communicating directly with the AirportAutomationAPI. The application focuses on delivering real-time airport management features with intuitive UX and secure interaction patterns.

A locally running file encryption service with AES-256 and Neon UI – all in the browser, without a server or backend.