Security system for detecting malicious actor's observation

A client computing device for testing a website vulnerability, comprising:

• a data processing apparatus;
• and
• a memory device storing instructions that when executed by the data processing apparatus cause the client computing device to perform operations comprising:
• retrieving website code of a website on a browser, the website code including a script;
• running a code evaluation tool on the browser;
• debugging the website code;
• searching for an indicator of malicious action during the debugging;
• determining presence of a potential malicious script based on the indicator;
• and
• returning an alert of the presence of the potential malicious script in the website.

A method for testing a website vulnerability, the method comprising:

• retrieving website code of a website, the website code including a script;
• debugging the website code;
• searching for an indicator of malicious action during the debugging, wherein searching for the indicator of malicious action during the debugging comprises identifying that one or more messages are removed in a console log;
• determining presence of a potential malicious script based on the indicator;
• and
• returning an alert of the presence of the potential malicious script in the website.