DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

Program for determining types of files for Windows, Linux and MacOS.

A collaborative, multi-platform, red teaming framework

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories.

HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors

Binary instrumentation framework based on FRIDA

Reverse Shell as a Service

Frida scripts to rewrite mobile applications at runtime to directly MitM all HTTPS traffic

Work in progress...

Collection of penetration test reports and pentest report templates. Published by the the best security companies in the world.

IMAJS meet <img>

Burp Suite Proxy Toggler Lite Add-on for Mozilla Firefox.