StateHunter and AuditGuard are open-source tools addressing security testing gaps in modern Single-Page Applications by performing client-side reconnaissance and enforcing safe harbor boundaries. StateHunter is a Chrome DevTools extension that introspects client-side state and unlinked routes invisible to traditional network proxies, while AuditGuard provides terminal-based boundary enforcement for ethical testing.
A security researcher tested nine cryptocurrency wallets for address poisoning attack detection, finding that only three provided warnings. The post discusses which wallets failed to alert users and how wallets should better warn against such attacks.