karvashy's starred repositories
chunkloader
A chrome/Firefox extension to retrieve and load react javascript chunks all at once for a wide range of javascript techs
misconfig-mapper
Misconfig Mapper is a fast tool to help you uncover security misconfigurations on popular third-party services used by your company and/or bug bounty targets!
BucketLoot
BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as well as Regular Expressions from publicly-exposed storage buckets by scanning files that store data in plain-text.
JS-Tap
JavaScript payload and supporting software to be used as XSS payload or post exploitation implant to monitor users as they use the targeted application. Also includes a C2 for executing custom JavaScript payloads in clients, and a "mimic" feature that automatically generates custom payloads.
smugglefuzz
A rapid HTTP downgrade smuggling scanner written in Go.
domlogger-configs
Useful configurations for the DomLogger++ extension
domloggerpp
A browser extension that allows you to monitor, intercept, and debug JavaScript sinks based on customizable configurations.
fuzzing-templates
Community curated list of nuclei templates for finding "unknown" security vulnerabilities.
burpsuite-project-file-parser
A Burp Suite Extension for parsing Project Files from the CLI.
cookiemonster
🍪 CookieMonster helps you detect and abuse vulnerable implementations of stateless sessions.
can-i-take-over-dns
"Can I take over DNS?" — a list of DNS providers and how to claim vulnerable domains.
server-side-prototype-pollution
A collection of Server-Side Prototype Pollution gadgets and exploits
postMessage-tracker
A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon
ResourceOverride
An extension to help you gain full control of any website by redirecting traffic, replacing, editing, or inserting new content.
singularity
A DNS rebinding attack framework.
transformers.js
State-of-the-art Machine Learning for the web. Run 🤗 Transformers directly in your browser, with no need for a server!