OAuch is an open-source security best practices and threats analyzer for OAuth 2.0 authorization server implementations

Powerful framework for pinpointing bug lifecycles in web browsers.

Python package to access the Tranco list

BugHog's dynamic web tests

TC4SE is a secure communication mechanism designed for trusted execution environments like Intel SGX. It separates the process of remote attestation from the TLS handshake to maintain high security assurance while offering enhanced performance and ease of implementation.

Source code for our NDSS'18 paper "Automated Website Fingerprinting through Deep Learning"

A Python implementation that facilitates finding timeless timing attack vulnerabilities.

utAPIa is a middleware that enhances APIs by enabling users to enforce privacy policies on data shared via OAuth delegations.

Trusted Time Extensions (T3E) is a novel solution that leverages TPM functionality to provide trusted time services in Intel SGX enclaves while protecting against common attacks.