Visit the Breach website here

Table of Contents

• About Breach
• Getting Started
• Demo
  • Scan URL
  • Results
  • History
  • Settings
• Looking Ahead
• Contributors
• License

About

Breach is an electron-based Cybersecurity application intended to keep front-ends safe without doing damage.

• One click for URL security test.

• Saves history of previous tests

• Customizable settings on color and font sizes for better user experience.

Getting Started

Download Breach and BreachServer

The application can be downloaded for windows or mac (Linux option for packaging from codebase is not confirmed.)

• For Mac OSX, right click on the downloaded file and click open.
• For Windows users, simply open the .exe file to begin.

The server can be forked and cloned to your local machine. Once it has been cloned, navigate to the correct folder in your terminal and

• Type the following:

npm install

npm start

Once you have these two items up and running you can get started or use our demo to learn more. We suggest changing the color of the application to your preference first.

Demo

Once you have opened Breach and BreachServer...

Scan URL

Upon entering a URL the app sends out a request to the server, running tests for instances of innerHTML in the code, cookies and some XSS tests.

Writing the URL for testing XSS

• The URL must be formatted for a search query (have "q=") in order for the XSS tests to be run.

Results

When the app is finished loading, it will print your results.

• Click on the defend logo to learn more about how to defend your app.

History

• You may view the history of results, change how many are shown, delete history items, or check out how to defend from attacks in the History tab of the application.

Settings

• From the settings page you can change the color of the application to one of five different settings, as well as change the font size on the pages.

Looking Ahead

Breach is currently in its first release. The features we would like to implement in the future are:

• Testing for SQL injection and DOS susceptibility.
• Ability to export data for future use.
• Display of active ports running on the server.
• Integrate server into app.
• Linux installer.

Contributors

Jason Yoon @Jason Yoon

Tommy Edmunds @Tommy Edmunds

Michael Geismar @michaelgeismar

License

MIT -- see LICENSE.md file for more details.

This product is accelerated by OS Labs.