jtof-fap's Stars
getify/You-Dont-Know-JS
A book series on JavaScript. @YDKJS on twitter.
tesseract-ocr/tesseract
Tesseract Open Source OCR Engine (main repository)
usebruno/bruno
Opensource IDE For Exploring and Testing Api's (lightweight alternative to postman/insomnia)
ticarpi/jwt_tool
:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens
Orange-Cyberdefense/arsenal
Arsenal is just a quick inventory and launcher for hacking programs
RenwaX23/XSS-Payloads
List of XSS Vectors/Payloads
glitchedgitz/cook
A wordlist framework to fullfill your kinks with your wordlists. For security researchers, bug bounty and hackers.
veracode-research/rogue-jndi
A malicious LDAP server for JNDI injection attacks
mzfr/liffy
Local file inclusion exploitation tool
chrislockard/api_wordlist
A wordlist of API names for web application assessments
synacktiv/HopLa
HopLa Burp Suite Extender plugin - Adds autocompletion support and useful payloads in Burp Suite
0xacb/viewgen
Viewgen is a ViewState tool capable of generating both signed and encrypted payloads with leaked validation keys
c6fc/npk
A mostly-serverless distributed hash cracking platform
P1sec/hermes-dec
A reverse engineering tool for decompiling and disassembling the React Native Hermes bytecode
decal/werdlists
:keyboard: Wordlists, Dictionaries and Other Data Sets for Writing Software Security Test Cases
yeswehack/pwn-machine
PwnMachine is a self hosting solution based on docker aiming to provide an easy to use pwning station for bug hunters.
zer0yu/Berserker
A list of useful payloads for Web Application Security and Pentest/CTF
benso-io/posta
🐙 Cross-document messaging security research tool powered by https://enso.security
zzzteph/probable_subdomains
Subdomains analysis and generation tool. Reveal the hidden!
hakluke/bug-bounty-standards
A list of edge cases that occur in bug bounty programs, conversations on how they should be handled. The goal is to standardise the way that specific situations are handled in bug bounties.
boringtools/git-alerts
Tool to detect and monitor GitHub org users' public repositories for secrets and sensitive files
irsdl/httpninja
HTTP.ninja
NeuraLegion/brokencrystals
A Broken Application - Very Vulnerable!
sf197/nuclei_gpt
Chat automates Nuclei template generation
fcavallarin/burp-dom-scanner
Burp Suite's extension to scan and crawl Single Page Applications
righettod/burp-piper-custom-scripts
Custom scripts for the PIPER Burp extensions.
CSPF-Founder/JavaSecurityCourse
Hacking and Securing Java
devanshbatham/heaptruffle
Mine URLs from Browser's Heap Snapshot for fun and profit
seanmarpo/webjars-swagger-xss
PoC for XSS in org.webjars:swagger-ui [3.14.2, 3.36.2]
CheckmarxDev/JavaVulnerableLab
lab