Mhoomaya

Live Protected Target Application · mhoomaya.in

WaapGuard Shield Active

PoW Active

Proof-of-Work Soft Shield

1.8 ms

Avg Inspection Latency

4 Articles

Live Published Articles

0 Threats

Attacks Intercepted

Publish New Article (Instant Proof)

Real-time Feed

Submit a new article below to see it appear on the live feed instantly, or test malicious input to verify WAAP protection:

Live Search & Attack Sandbox

Active WAF

Test live query inspection with normal search terms or click pre-built attack vectors to demonstrate threat blocking:

Query String Input

Live Published Articles Feed

Live Attack & PoW Inspector

', content: '

', }), }); const data = await res.json(); out.innerHTML = `

HTTP ${res.status} FORBIDDEN — XSS Injection Blocked!

• Vector: Cross-Site Scripting (xss)

• Incident ID: ${(data.error && data.error.incidentId) || 'inc_' + Date.now()}

`; } else if (type === 'replay') { const pow = await solveClientMicroPoW(); // First consume it await fetch('/api/posts', { method: 'POST', headers: { 'Content-Type': 'application/json', 'X-WaapGuard-PoW-Challenge': pow ? pow.challenge : '', 'X-WaapGuard-PoW-Nonce': pow ? String(pow.nonce) : '', 'X-WaapGuard-PoW-Hash': pow ? pow.hash : '', 'X-WaapGuard-PoW-Signature': pow ? pow.signature : '', }, body: JSON.stringify({ title: 'Init', category: 'Sec', author: 'Test', content: 'Init' }), }); // Replay the same nonce const res2 = await fetch('/api/posts', { method: 'POST', headers: { 'Content-Type': 'application/json', 'X-WaapGuard-PoW-Challenge': pow ? pow.challenge : '', 'X-WaapGuard-PoW-Nonce': pow ? String(pow.nonce) : '', 'X-WaapGuard-PoW-Hash': pow ? pow.hash : '', 'X-WaapGuard-PoW-Signature': pow ? pow.signature : '', }, body: JSON.stringify({ title: 'Replay Race', category: 'Sec', author: 'Test', content: 'Replay Race Attack' }), }); const data2 = await res2.json(); out.innerHTML = `

HTTP ${res2.status} FORBIDDEN — Replay Dropped!

• Reason: ${(data2.error && data2.error.message) || 'PoW nonce replay detected'}

• Single-Use Cache: Atomic Nonce Invalidation Preserved

`; } } catch (err) { out.innerHTML = `

Error: ${err.message}

`; } }