Script to test open Akamai ARL vulnerability.
Some files for bruteforcing certain things.
Demo for Exploiting CORS Miss configuration using XSS
Command line tool for testing CRLF injection on list of domains.
This is a tool published for the Citrix ADC (NetScaler) vulnerability. We are only disclosing this due to others publishing the exploit code first.
Extends the listing layouts capabilities of Plone
Fuzzing Payloads to Assist in Web Application Testing.
List HackerOne private program assets
Hacking with the power of checklists.
Proof of concept code for client-side vulnerabilities
An experiment using goroutines and channels to create a simple HTTP flooder. Mixes GET, POST, PUT, PATCH, ... to one baseline URL.
Scan Victim Backup Directories & Backup Files
PENTOL - Pentester Toolkit for Fiddler2
Online Subdomain Detect Script
Download an entire website from the Wayback Machine.
The best tool to find and prove XSS flaws.