Python spyware that captures keystrokes, mouse inputs, screenshots & microphone audio — exfiltrates via email every 10 seconds with self-delete on discovery.
Device Bound Session Credentials (DBSC) for Node.js — middleware that binds session cookies to a hardware TPM key to stop cookie theft, with a Web Crypto polyfill for Firefox & Safari.
Device Bound Session Credentials for Symfony: sessions tied to hardware keys.
Detects infostealers (RedLine, Lumma, Vidar…) copying your browser cookies and saved passwords on Windows. One exe, no dependencies, Windows 7 to 11.
Device Bound Session Credentials (DBSC) plugin for Better Auth: bind sessions to a device key so stolen cookies stop working.
Windows browser-cookie & credential access monitor: detects/observes readable handle access, tray icon, opt-in enforcement. Defensive security, MIT.
Офлайн-защита сессий для Windows и Linux (Omarchy): Telegram, браузеры, Discord от инфостилеров. Без сети.
DFIR engagement INC-2026-006: stored XSS and session hijacking on NexaPortal (bru-web-02). Forensic investigation and Suricata detection.
To associate your repository with the cookie-theft topic, visit your repo's landing page and select "manage topics."