Home / Skills / browser-exploitation
browser-exploitation
hypnguyen1209/offensive-claudeSkill
Use when building a client-side browser exploit — V8/JSC JIT type confusion to renderer R/W, V8 heap-sandbox escape, renderer-to-browser sandbox escape (Mojo IPC, GPU/Dawn/ANGLE), Electron/webview IPC abuse, 1-click RCE chains
Why this score
This repo hosts 10 skills, so its 394 stars are split between them (about 39 each) for scoring.
Popularity score: 60/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Oct 20, 2026 at commit a506ad34fa25, with Cisco's open-source skill-scanner.
What its code does:
- Runs code it builds while running (eval or exec) Harder to read ahead of time, since the code is assembled while it runs.scripts/sandbox_escape.js:30
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Other makers' add-ons that do the same job, next to this one.
| Name | Score | Stars | Context | Updated |
|---|---|---|---|---|
| This onebrowser-exploitation hypnguyen1209/offensive-claude · Skill | 60 | ★ 394 | ≈62 always | 1mo ago |
| browser ruvnet/RuView · Skill Both about browser | 91 | ★ 99k | ≈20 always | 16d ago |
| browser-search Johell1NS/browser-search · Skill Both about browser | 71 | ★ 536 | ≈34 always | 2mo ago |
| remote-browser browser-use/browser-use · Skill Both about browser | 94 | ★ 119k | ≈30 always | 18d ago |
| adspower-browser AdsPower/adspower-browser · Skill Both about browser and client | 70 | ★ 145 | ≈84 always | 16d ago |
| crawlio-browser Crawlio-app/crawlio-browser · MCP server Both about browser | 43 | ★ 8 | not measured | 3mo ago |