Continuing on API client security, we cover more sandbox bypasses, this time in Bruno and Hoppscotch, as well as JavaScript ...

Rieseberg is one of the maintainers of Electron, which uses a Chromium engine and Node.js to allow web apps in things like HTML, CSS, and JavaScript to operate like desktop applications regardless of ...

Loki is a stage-1 command and control (C2) framework written in Node.js, built to script-jack vulnerable Electron apps MITRE ATT&CK T1218.015. Developed for red team operations, Loki enables evasion ...

If there’s one thing developers agree on about cross-platform applications, it’s that it’s easier to create a GUI with HTML, CSS, and JavaScript than to use one of the many cross-platform ...

Discussion forums and blog platforms are abuzz piling hate on electron – a JavaScript GUI framework that lets developers create desktop applications using JavaScript, HTML and CSS. Electron allows a ...

A team of researchers recently presented data about vulnerabilities in apps built on the open source Electron framework for creating desktop apps with JavaScript, HTML and CSS. In that camp are Visual ...