BuffaloWill

oxml_xxe

A tool for embedding XXE/XML exploits into different filetypes

burpsuite-project-file-parser

A Burp Suite Extension for parsing Project Files from the CLI.

gumbler

Dig through Git commits and logs

gatling_gun

Basic script to rotate through reverse SSH proxies built through EC2, useful for obfuscating (weakly anonymizing) your source. Nice for bypassing/slowing down IP based IDS/IPS.

whoiswatcher

Do bulk whois lookups and get alerted on domains of interest.

odle

An easy to use security data parsing tool. Takes in data from different tools and outputs standardized JSON.

BChecksPublic

A collection of BurpSuite BChecks

cloud-herder

A plug-in for Metasploit that utilizes the fog driver to manage cloud instances to perform tasks.

lucee-webshells

A tool for building Lucee extensions including remote code execution

find-sec-bugs

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Groovy and Scala projects)

gf

A wrapper around grep, to help you grep for things

NaughtyGitProject

This is a purposefully vulnerable Git project. Contains challenges and seconds as testing for https://github.com/BuffaloWill/gumbler

text_packer

This tool can be used to hide text inside of different file formats (jpg,docx,swf,etc.).

LinkFinder

A python script that finds endpoints in JavaScript files

metasploit-framework

Metasploit Framework

proxify

Swiss Army knife Proxy tool for HTTP/HTTPS traffic capture, manipulation, and replay on the go.

PSGumshoe

Serpico

SimplE RePort wrIting and COllaboration tool