pushsecurity/browser-identity-attacks-matrix resource

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1436 stars · 108 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A curated knowledge base of browser and identity attack techniques covering SaaS applications, identity providers, phishing, and browser-based threats, formerly known as the SaaS Attacks Matrix. It is a reference resource for security researchers, red and blue teams, and penetration testers rather than runnable software.

Use cases

• learn SaaS attack techniques for defense
• build red team scenarios for identity attacks
• understand phishing and AiTM techniques
• map browser-based threats for security training
• research OAuth and session hijacking attacks
• prepare purple team exercises for SaaS threats

When to choose

• you need a structured reference of SaaS and identity attack techniques
• you are training a security team on browser-based threats
• you are a red teamer planning identity-focused attack simulations

When to avoid

• you need a tool that detects or blocks attacks in production
• you want runnable software or an API
• you need endpoint or network security tooling

Facets

learning-resource · maturity active

security penetration-testing documentation security penetration-testing web-development browser attack-matrix saas-security identity-attacks phishing red-team blue-team mitre-attck-style knowledge-base web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="pushsecurity/browser-identity-attacks-matrix")