Stars
Browser automation and computer use for AI agents. One CLI and MCP server for your signed-in browser, native macOS apps, and real iPhones.
A Caido plugin to monitor, intercept, and debug JavaScript sinks based on customizable configurations.
Deobfuscate obfuscator.io, unminify and unpack bundled javascript
⛰️ LifeOS — The universal AI Harness designed to move you from Current to Ideal state in both life and work.
Temodar Agent is an AI-powered WordPress plugin and theme security analysis platform built for security researchers, product security teams, auditors, and defenders. It combines AI agent workflows,…
🛠️ Workflows created by the community
Secrets Patterns DB: The largest open-source Database for detecting secrets, API keys, passwords, tokens, and more.
A small plugin to filter the http history via hotkey
A simple browser extension to quickly find interesting security-related information on a webpage.
A fancier postMessage tracker with Chrome Manifest version V3 support and a few additional features, inspired by Frans Rosens postmessage tracker.
Scan for secrets in dangling commits on GitHub using GH Archive data.
detect technologies with wappalyzer alternative
jxscout superpowers JavaScript analysis for security researchers
Burp extension to filter HTML elements on the fly with CSS selectors in the HTTP message viewer.
Extract GraphQL operations from javascript
View HTTP/HTTPS requests made by any Linux program
Burpsuite plugin for Interact.sh
🚫 Advanced tool for security researchers to bypass 403/40X restrictions through smart techniques and adaptive request manipulation. Fast. Precise. Effective.
CSPT is an open-source Burp Suite extension to find and exploit Client-Side Path Traversal.
Chrome extension for automating CSPT discovery
A Burp Suite extension to add OpenAI (GPT) on Burp and help you with your Bug Bounty recon to discover endpoints, params, URLs, subdomains and more!
Useful configurations for the DomLogger++ extension
A browser extension that allows you to monitor, intercept, and debug JavaScript sinks based on customizable configurations.
Burp Plugin to Bypass WAFs through the insertion of Junk Data