awesome-electronjs-hacking
by doyensec
awesome listpushed about 2 years ago
A curated list of awesome resources about Electron.js (in)security
AI summary
Security resource repository
A curated list of resources and tools to help developers secure Electron.js applications
- stars
- 592
- forks
- 62
- watching
- 18
- awesome lists
- 3
- entries
- 90
What's in the list
90 links in 7 sections, with live GitHub stats.activeno commit in 2y
Presentations
Open-Source & Commercial Tools
Electronegativity, a static code analysis tool to find vulnerabilities in Electron-based applications &
- Devtron
, an Electron DevTools extension
Fiddle
, to quickly create and play with small Electron experiments across different Electron versions
- ElectroNG
Premium SAST tool built after Electronegativity to help automate security reviews
Papers
Vulnerabilities Write-Ups and Exploits
"OVE-20210809-0001 Visual Studio Code .ipynb Jupyter Notebook XSS (Arbitrary File Read)", Justin Steven
"Important, Spoofing - zero-click, wormable, cross-platform remote code execution in Microsoft Teams", Oskars Vegeris
"Insecure use of shell.openExternal() in Wire Desktop", Benjamin Altpeter
"Prototype Pollution Vulnerabilities in Electron Apps", @s1r1u5
"RCE in GitHub Desktop < 2.9.4", Vladimir MetnewBlog Posts and Articles
Books
Related lists
Awesome Node.js SecurityNothing in this list matches your filter.
Featured in 3 awesome lists
Each link jumps to the spot where the list mentions awesome-electronjs-hacking.
More related projects
sindresorhus/electron-timber405
electron-userland/electron-builder13.7K