Stars
Coding articles to level up your development skills
The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
⚙️ NGINX config generator on steroids 💉
DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
A JavaScript Typing Animation Library
WebGoat is a deliberately insecure application
⚓️ Easily test HTTP webhooks with this handy tool that displays requests instantly.
Network intruder and presence detector. Scans for devices connected to your network and alerts you if new and unknown devices are found.
Produces persistent, respawning "super" cookies in a browser, abusing over a dozen techniques. Its goal is to identify users after they've removed standard cookies and other privacy data such as Fl…
P4wnP1 A.L.O.A. by MaMe82 is a framework which turns a Rapsberry Pi Zero W into a flexible, low-cost platform for pentesting, red teaming and physical engagements ... or into "A Little Offensive Ap…
A collaborative, multi-platform, red teaming framework
KDE Connect implementation for GNOME
Self-deployable file hosting service for red teamers, allowing to easily upload and share payloads over HTTP and WebDAV.
WebVirtMgr panel for manage virtual machine
XSS payloads designed to turn alert(1) into P1
🤘 The biggest collection of themes for Terminator terminal.
Advanced JavaScript Deobfuscation via Partial Evaluation
A Javascript library for browser exploitation
Easy automated vulnerability scanning, reporting and analysis
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
A hyper plugin to provide a flexible GDB GUI frontend with the help of GEF, pwndbg or peda
a javascript static security analysis tool
🕷️ XSS Listener is a penetration tool for easy to steal data with various XSS.
A collection of useful Serverless functions I use when pentesting