LewisArdern

semgrep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

dxsonnet

Just another Jsonnet library: a collection of generic jsonnet functions

recheck

The trustworthy ReDoS checker

tamperchrome

Tamper Dev is an extension that allows you to intercept and edit HTTP/HTTPS requests and responses as they happen without the need of a proxy. Works across all operating systems (including Chrome OS).

codeql

GitHub Satellite 2020 workshops on finding security vulnerabilities with CodeQL for Java/JavaScript.

codeql

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

postMessage-tracker

A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon

perfume.js

Web performance library for measuring all performance vitals metrics

inql

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

awesome-gcp-certifications

Google Cloud Platform Certification resources.

eslinter

Manual JavaScript Linting is a Bug

RisXSS

RisXSS

jsfuzz

coverage guided fuzz testing for javascript

Notes

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

wpBullet

boom

HTTP-friendly error objects

bountyplz

Automated security reporting from markdown templates (HackerOne and Bugcrowd are currently the platforms supported)

eslint-security-scanner-configs

eslintrc.js config files for running static analysis on JavaScript to identify security issues.

nmap-bootstrap-xsl

A Nmap XSL implementation with Bootstrap.

RE-iOS-Apps

A completely free, open source and online course about Reverse Engineering iOS Applications.

learn-Go-the-hard-way

learn Go by coding.

CheatSheetSeries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

EndpointFinder

fuzzilli

A JavaScript Engine Fuzzer

workshop-reverse-engineering

ghidra

Ghidra is a software reverse engineering (SRE) framework

SPAudit

attack-review-testbed

Make it easy to probe the strengths and weaknesses of a hardened Node.js stack

H5SC

HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors