the-bumble

Damn-Vulnerable-GraphQL-Application

Damn Vulnerable GraphQL Application is an intentionally vulnerable GraphQL service implementation designed for learning about and practising GraphQL Security.

burp-multiplayer

Burp with Friends

client-side-prototype-pollution

Prototype Pollution and useful Script Gadgets

h2csmuggler

HTTP Request Smuggling over HTTP/2 Cleartext (h2c)

mongo-objectid-predict

Predict Mongo ObjectIds

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

TLS-poison

sliver

Adversary Emulation Framework

hotwax

Coverage-guided binary fuzzing powered by Frida Stalker

smuggler

Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3

preeny

Some helpful preload libraries for pwning stuff.

sif

SocketInjectingFuzzer

rmiscout

RMIScout uses wordlist and bruteforce strategies to enumerate Java RMI functions and exploit RMI parameter unmarshalling vulnerabilities

kubetap

Kubectl plugin to interactively proxy Kubernetes Services with ease

postMessage-tracker

A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon

patch-apk

Wrapper to inject an Objection/Frida gadget into an APK, with support for app bundles/split APKs.

objection

📱 objection - runtime mobile exploration

padding-oracle-attacker

🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.

phpggc

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

dailysuntzu

~5M Docker container to send Sun Tzu quotes via Twilio SMS daily

GitGot

Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.

lithium

Line-based testcase reducer

dharma

Generation-based, context-free grammar fuzzer. Refer to https://github.com/posidron/dharma for a maintained version.

Bugs

Collection of software bugs found by SkyLined

usbkill

« usbkill » is an anti-forensic kill-switch that waits for a change on your USB ports and then immediately shuts down your computer.

say_what

Using speech-to-text to fully check out during con calls

MuseScore

MuseScore is an open source and free music notation software. For support, contribution, bug reports, visit MuseScore.org. Fork and make pull requests!