hackvertor

hackvertor

blind-css-exfiltration

MentalJS

JavaScript parser and sandbox

visualfuzzer

A visual fuzzer written in NodeJS to find Zalgo characters

taborator

A Burp extension to show the Collaborator client in a tab

clickbandit

A JavaScript clickjacking PoC generator

HTTPLeaks

HTTPLeaks - All possible ways, a website can leak HTTP requests

server-side-prototype-pollution

3d-css-tutorial

albinowaxUtils

diffy

A BApp to show the differences between two responses

DOMPurify

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

param-miner

release-action

An action which manages a github release

turbo-intruder

Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.