OWASP / www-project-qrljacker

OWASP QRLJacker is a highly useful framework designed specifically for security professionals and web application developers to demonstrate, detect, and mitigate Quick Response Code Login Jacking (QRLJacking) attacks. As passwordless login mechanisms utilizing QR codes become increasingly ubiquitous across modern web and mobile applications, the risk of session hijacking via malicious QR codes has surged. This framework automates the creation of malicious payloads to test application vulnerabilities and provides actionable mitigation strategies. By integrating QRLJacker into their security testing pipelines, developer and security teams can actively identify architectural weaknesses in their authentication flows before malicious actors exploit them, ensuring more robust, hardened login systems for end-users.