Stars
Deobfuscate obfuscator.io, unminify and unpack bundled javascript
Agentic AI Infrastructure for magnifying HUMAN capabilities.
WP-Hunter is a WordPress plugin/theme reconnaissance and static analysis (SAST) tool. It is designed for security researchers to evaluate the vulnerability probability of plugins by analyzing metad…
🛠️ Workflows created by the community
Secrets Patterns DB: The largest open-source Database for detecting secrets, API keys, passwords, tokens, and more.
A small plugin to filter the http history via hotkey
A simple browser extension to quickly find interesting security-related information on a webpage.
A fancier postMessage tracker with Chrome Manifest version V3 support and a few additional features, inspired by Frans Rosens postmessage tracker.
Scan for secrets in dangling commits on GitHub using GH Archive data.
wappalyzer alternative based on wappalyzer browser extension
jxscout superpowers JavaScript analysis for security researchers
Burp extension to filter HTML elements on the fly with CSS selectors in the HTTP message viewer.
Extract GraphQL operations from javascript
View HTTP/HTTPS requests made by any Linux program
Burpsuite plugin for Interact.sh
🚫 Advanced tool for security researchers to bypass 403/40X restrictions through smart techniques and adaptive request manipulation. Fast. Precise. Effective.
CSPT is an open-source Burp Suite extension to find and exploit Client-Side Path Traversal.
Chrome extension for automating CSPT discovery
A Burp Suite extension to add OpenAI (GPT) on Burp and help you with your Bug Bounty recon to discover endpoints, params, URLs, subdomains and more!
Useful configurations for the DomLogger++ extension
A browser extension that allows you to monitor, intercept, and debug JavaScript sinks based on customizable configurations.
Burp Plugin to Bypass WAFs through the insertion of Junk Data
Fabric is an open-source framework for augmenting humans using AI. It provides a modular system for solving specific problems using a crowdsourced set of AI prompts that can be used anywhere.
uses crewai to create a list of possible new endpoints from a list of existing endpoints
generates unique subdomain names and runs httpx on them