awesome-repositories.com
Blog
MCP
awesome-repositories.com

Entdecke die besten Open-Source-Repositories mit KI-gestützter Suche.

EntdeckenKuratierte SuchenOpen-Source-AlternativenSelf-hosted SoftwareBlogSitemap
ProjektMCP-ServerÜber unsRanking-MethodikPresse
RechtlichesDatenschutzAGB
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
·

7 Repos

Awesome GitHub RepositoriesBrowser Session Token Reuse

Leveraging existing browser cookies and authentication tokens to impersonate a user for API requests without re-authentication.

Distinct from Session Hijacking: Distinct from Session Hijacking: focuses on reusing existing browser session tokens for API calls rather than intercepting or stealing tokens from network traffic.

Explore 7 awesome GitHub repositories matching security & cryptography · Browser Session Token Reuse. Refine with filters or upvote what's useful.

Awesome Browser Session Token Reuse GitHub Repositories

Finde die besten Repos mit KI.Wir suchen mit KI nach den am besten passenden Repositories.
  • nesquena/hermes-webuiAvatar von nesquena

    nesquena/hermes-webui

    14,912Auf GitHub ansehen↗

    Hermes-webui is a self-hosted AI orchestrator and web interface for managing autonomous agents. It serves as a multi-provider gateway that connects cloud and local large language models, providing a central hub to execute scheduled background jobs, run shell commands, and manage agent memory on private hardware. The system distinguishes itself through a persistent memory manager that utilizes knowledge graphs and markdown files for long-term context across sessions. It features a model context protocol host for extending agent capabilities with standardized tools and supports the orchestratio

    Allows agent tools to attach to a running local browser instance to leverage existing cookies and sessions.

    Pythonagentai-agentshermes
    Auf GitHub ansehen↗14,912
  • victornpb/undiscordAvatar von victornpb

    victornpb/undiscord

    6,583Auf GitHub ansehen↗

    Undiscord is a browser-based tool that deletes all messages from a Discord channel or direct message conversation by running a self-contained JavaScript snippet in the developer console. The script leverages the user's existing browser session, including cookies and authentication tokens, to impersonate the user and execute Discord API calls without re-authentication. The tool deletes messages one by one via Discord's REST API endpoints, processing each response before sending the next request, and implements custom delay logic between API calls to avoid Discord's rate-limiting thresholds. It

    Leverages existing browser cookies and authentication tokens to impersonate the user for Discord API requests without re-authentication.

    JavaScriptbrowser-extensionbulk-operationdelete-multiple
    Auf GitHub ansehen↗6,583
  • epiral/bb-browserAvatar von epiral

    epiral/bb-browser

    5,814Auf GitHub ansehen↗

    bb-browser is an authenticated web scraper and browser automation CLI that also functions as an MCP server for AI coding tools. It treats the browser as a programmable runtime environment, enabling AI agents to control a live Chrome instance through a standard protocol while leveraging existing login sessions for authenticated actions. The project distinguishes itself through a dual CLI and MCP interface, allowing both direct command-line control and AI-driven browser manipulation. It includes a parallel multi-platform query engine that executes simultaneous searches across multiple websites,

    Leverages existing browser login sessions to perform authenticated actions without re-entering credentials.

    TypeScript
    Auf GitHub ansehen↗5,814
  • browsermcp/mcpAvatar von BrowserMCP

    BrowserMCP/mcp

    5,817Auf GitHub ansehen↗

    BrowserMCP is a browser automation bridge that connects AI tools to a live browser session through a local proxy server. It implements a standardized protocol for sending commands like click, type, and navigate to a real browser instance running on the user's machine, while keeping all browsing data on the device. The project distinguishes itself by preserving user sessions and fingerprints across automation tasks. It attaches to the user's existing browser profile to maintain cookies, logins, and authentication state, and uses the real browser's user agent, viewport, and extension context to

    Reuses existing browser session tokens and cookies to preserve authentication across automation tasks.

    TypeScriptbrowser-automationbrowser-extensionclaude
    Auf GitHub ansehen↗5,817
  • projectdiscovery/naabuAvatar von projectdiscovery

    projectdiscovery/naabu

    5,766Auf GitHub ansehen↗

    Naabu is a port scanner library and tool that probes hosts for open ports using SYN, CONNECT, and UDP methods to identify active services. It functions as a Go library for embedding port scanning into programs, and as a standalone tool that accepts targets as hostnames, IP addresses, CIDR ranges, or ASN numbers. The tool discovers live hosts before scanning, filters ports by range or top lists, and can integrate with Nmap for service version detection. The project distinguishes itself through its SYN-based port probing approach that sends TCP SYN packets and analyzes responses without complet

    Attaches to a running Chrome instance with remote debugging to reuse an existing authenticated session for crawling.

    Gocdn-exclusionhacktoberfestnmap
    Auf GitHub ansehen↗5,766
  • browser-use/workflow-useAvatar von browser-use

    browser-use/workflow-use

    4,054Auf GitHub ansehen↗

    Dieses Projekt ist ein LLM-Browser-Automatisierungs-Framework und ein KI-Agent-Browser-Interface. Es dient als Steuerungsebene, die Anweisungen in natürlicher Sprache mithilfe von Large Language Models in Browser-Interaktionen übersetzt, wodurch KI-Agenten Webseiten über standardisierte Browser-Steuerungsfunktionen navigieren und mit ihnen interagieren können. Das System fungiert als RPA-Workflow-Orchestrator und Headless-Browser-Management-Tool, das in der Lage ist, deterministische Browser-Sequenzen aufzuzeichnen und wiederzugeben, um repetitive Aufgaben zu automatisieren. Es zeichnet sich durch Stealth-Konfigurationen aus, einschließlich Residential Proxies und modifizierter Browser-Engines, um Bot-Erkennung zu umgehen und CAPTCHAs zu lösen. Die Plattform deckt ein breites Spektrum an Fähigkeiten ab, einschließlich strukturierter Web-Datenextraktion, persistenter Sitzungsverwaltung zur Aufrechterhaltung der Authentifizierung und Human-in-the-Loop-Intervention für komplexe Schritte wie Multi-Faktor-Authentifizierung. Es unterstützt sowohl lokale Konnektivität als auch verwaltete Cloud-Sandbox-Deployments und bietet visuelles Workflow-Management sowie Echtzeit-Aktivitätsüberwachung über interaktive Graphen. Die Integration erfolgt über ein Command-Line-Interface und API-Konnektivität für externe LLM-Provider und Orchestrierungsplattformen von Drittanbietern.

    Attaches to existing running browser instances via remote debugging to preserve active tabs and authenticated sessions.

    Pythonbrowser-automationbrowser-use-boxrpa
    Auf GitHub ansehen↗4,054
  • specterops/bloodhoundAvatar von SpecterOps

    SpecterOps/BloodHound

    2,789Auf GitHub ansehen↗

    BloodHound is an identity risk management platform and graph-based attack path analyzer used to map identity relationships and permissions in Active Directory. It functions as a security tool for auditing directory services, uncovering unintended privilege relationships, and visualizing sequences of permissions that can lead to domain compromise. The project differentiates itself as a comprehensive adversary emulation framework that coordinates remote agents and executes post-exploitation commands. It includes a reverse proxy for bypassing multi-factor authentication via real-time session hij

    Implements a reverse proxy to stream live browser sessions and bypass multi-factor authentication.

    Go
    Auf GitHub ansehen↗2,789
  1. Home
  2. Security & Cryptography
  3. Vulnerability Assessment and Testing
  4. Security Testing and Auditing
  5. Security Testing
  6. Authentication Bypass Techniques
  7. Session Hijacking
  8. Browser Session Token Reuse

Unter-Tags erkunden

  • Browser Session Attachments1 Sub-TagAttaches to a running Chrome instance with remote debugging to reuse an existing authenticated session for crawling. **Distinct from Browser Session Token Reuse:** Distinct from Browser Session Token Reuse: focuses on attaching to a live browser instance, not just reusing tokens for API calls.