Intranets are intended to be secured from the outside by way of firewalls and other networking devices. Unfortunately, there has been a move towards non-routable address space as a method of protection, rather than other methods of protecting private IP space. This paper will outline a number of flaws that can be exploited by an adversary because of the use of well known non-routable IP address spaces.
Fast symmetric cryptography in Javascript
Most interestingly, however, Facebook allows you to do this by executing your code on *.facebook.com. What this means is your code has privileges to do whatever any of Facebook's code can do -- if you can make it happen...
Message Vault is a tool for creating and sharing encrypted messages.Message Vault (MV) is a single file (HTML/Javascript) that you save to your local PC (Mac, Win or Linux), then use a Web Browser to create, edit, and encrypt a message.
Yet another JS portscanner
Browser based tool for website XSS testing