06 2020 · Security research
Raceocat
A practical toolkit born from master’s research to make exploiting race conditions in web applications efficient and repeatable.
- My role
- Researcher & lead developer
- Project state
- Published research · Apache 2.0
- Built with
- JavaScript
- Page updated
01 / Context
The problem
Web race-condition testing is timing-sensitive and difficult to reproduce with ordinary interception and scanning workflows.
02 / Build
The approach
A Firefox extension intercepts requests and forwards them to parallel race routines, supported by a dispatcher, a ZAP extension, and a vulnerable lab app.
03 / Highlights
What is inside
- Browser-to-dispatcher workflow
- ZAP testing extension
- Research demos and lab cases