strawp

web-shells

Web shells for use in penetration testing

random-scripts

Quick and dirty scripts that don't really belong in a larger project

greedy-git

Tool for analysing remote git repos accidentally shared by web devs

autotrader-miner

Single-user site for mining Autotrader.co.uk data and providing more useful searches for cars

poisonpen

Python tool for creating malicious Office docs

version-detective

Use git and static files to determine a web application's middleware version

LinkedInBuddy

A Burp passive scanner extension which helpfully takes a note of any names and job titles you encounter whilst browsing LinkedIn

payloadgen

Generate a veil payload directly from the web

posh-hunter

Find a PoshC2 instance from a payload file and interact with it

cct-syllabus

CREST Certified Tester Syllabus in a non-crap format for revision purposes

swagger-hose

Squirt a bunch of swagger requests into an API just to get some base requests to start from

todo.txt-recurring-tasks

are-seas

bootra1n

Just enough Linux for checkra1n.

cryptogramSolver

kindle-clock

LinkedInt

LinkedInt: A LinkedIn scraper for reconnaissance during adversary simulation

ocatodo

Download your last Ocado shopping list as a todo.txt list

prowler

Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more

resourcespace

git clone of https://svn.resourcespace.com/svn/rs/releases/9.8/

RIFT

Rapid intranet framework template: Create flexible web-based relational databases inside your organisation with the minimum development time

strava-cli

Strava command-line interface

strawp

profile

strawp.github.io

toothbot

Toothbrushing timer for Pimoroni Scrollbot