mrrootsec

graphql-cop

Security Auditor Utility for GraphQL APIs

chunkloader

A chrome/Firefox extension to retrieve and load react javascript chunks all at once for a wide range of javascript techs

Android-iOS-Cheat-Sheet

ARTHookScripts

frida runtime resolves smali

graudit

grep rough audit - source code auditing tool

subdomain-monitoring-elasticsearch

domlogger-configs

Useful configurations for the DomLogger++ extension

GQLSpection

GQLSpection - parses GraphQL introspection schema and generates possible queries

medusa

Binary instrumentation framework based on FRIDA

baddns

Check subdomains for subdomain takeovers and other DNS tomfoolery

inql

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

fabric

fabric is an open-source framework for augmenting humans using AI. It provides a modular framework for solving specific problems using a crowdsourced set of AI prompts that can be used anywhere.

nowafpls

Burp Plugin to Bypass WAFs through the insertion of Junk Data

httpc

HTTP Client Library for security tooling

jsoncrack.com

✨ Innovative and open-source visualization application that transforms various data formats, such as JSON, YAML, XML, CSV and more, into interactive graphs.

csprecon

Discover new target domains using Content Security Policy

gungnir

CT Log Scanner

linux-exploit-suggester

Linux privilege escalation auditing tool

postleaks

Search for sensitive data in Postman public library.

http-garden

Differential testing and fuzzing of HTTP servers and proxies

bbscope

Scope gathering tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!

get-all-parameters

Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist

postMessage-tracker-firefox

A Firefox Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon

Frida-Labs

The repo contains a series of challenges for learning Frida for Android Exploitation.

wafer

dnsgen

Generates combination of domain names from the provided input.

curated-semgrep-rules

Curated Collection of Popular Community Rules for Semgrep

frida-android-helper

Frida Android utilities

flutter-spy

Explore, analyze, and gain valuable data & insights from reverse engineered Flutter apps.

JS-Tap

JavaScript payload and supporting software to be used as XSS payload or post exploitation implant to monitor users as they use the targeted application. Also includes a C2 for executing custom JavaScript payloads in clients, and a "mimic" feature that automatically generates custom payloads.