zerodom

Deterministic attack-surface perception for AI security agents.

#2762 by GitHub starsTesting & debugging Review & securityChecked 2026-11-02

What it connects

Deterministic attack-surface perception for AI security agents. Attaches over chrome.debugger to the Chrome you're already logged into (cookies, MFA and SSO already done) and turns the live page into a short numbered interaction graph an agent can act on ([03] button 'Sign In'), with CSS selectors kept server-side and out of the model's context. Cross-identity tools (compare_identities, replay) flag a byte-identical response across two logged-in users as a cross-tenant IDOR, and scan maps the attack surface from the CLI. No LLM in the parse; 71% fewer tokens than Playwright's ARIA snapshot mode.

Registry listing — description sourced from the publisher's entry in an awesome-list. Setup, compatibility and requirements are not verified; see the repository.

Source: https://github.com/DevHusnainAi/zerodom · ★ 3 on the source repo

Setup instructions and compatibility are compiled from publisher docs and community reports, not hands-on testing, unless a step is marked Tested. Check the source before relying on a setup.