Skip to content

Web Browser Hooking Framework. Manage, execute and assess web browser vulnerabilities

License

Notifications You must be signed in to change notification settings

compewter/whoof

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

55 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

whoof (Web-Browser Hooking Framework)

whoof is an early stage lightweight web browser hooking framework. A web browser hook can be thought of as a backdoor in a web page allowing an attacker to execute commands in the page with or without the visitor noticing. whoof is a web application security tool to manage, execute and assess web browser vulnerabilities.

whoof uses Node/Express server-side, with React/Redux on the client-side.

Hooked browsers are managed via WebSockets.

ss

Check out the wiki for details on features and getting started.

Features

Custom Attacks

Use the attack builder to construct custom attacks on the fly.

screenshot

Execute Arbitrary Commands with the Terminal

Use the terminal to execute arbitrary commands or retrieve data from hooked pages. ss

Easily import/export attacks

One click download an exported attack which can easily be imported in the admin web app.

This repo was built off of and ejected from Facebook's create-react-app

About

Web Browser Hooking Framework. Manage, execute and assess web browser vulnerabilities

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published