Repositories list

• burp-injector

  Public
  💉 Burp Deep Data Injector is a BurpSuite extension that allows pentesters to define targets within non-standard locations such as encoded regions or serialized …

  pentesting-toolsburp-extension

  Java

  •

  MIT License

  •1•2•0•1•Updated Jan 29, 2026Jan 29, 2026

• burp-selenium-scripter

  Public
  Burp Selenium Scripter allows pentesters to script login sequences using a simple builder pattern that utilizes xpath to target elements.

  Java

  •

  MIT License

  •1•0•0•0•Updated Jan 20, 2026Jan 20, 2026

• Special-token-lists

  Public
  For Security research purposes, I have created a lists of special tokens used by various LLMs

  MIT License

  •3•0•0•0•Updated Jan 14, 2026Jan 14, 2026

• burp-hotpatch

  Public
  Burp Hotpatch ️provides pentesters with a quick way to hook into key BurpSuite functions using user defined scripts.

  Java

  •

  MIT License

  •2•3•8•0•Updated Oct 30, 2025Oct 30, 2025

• burp-magicvars

  Public
  🪄 Magic variables is a Burp extension that provides helpful replacements in traffic such as random integers, random UUIDs and random strings.

  pentesting-toolsburp-extension

  Java

  •

  MIT License

  •1•1•2•0•Updated Oct 23, 2025Oct 23, 2025

• easy-turbo-intruder

  Public
  A workflow that builds the newest standalone version of PortSwigger's turbo-intruder.jar file

  0•0•0•0•Updated May 30, 2025May 30, 2025

• reconftw_box

  Public
  Offloading reconftw to a separate instance so we don't clog up network traffic and hog our local resources

  Shell

  •0•0•6•0•Updated May 24, 2023May 24, 2023

• FaceBroke

  Public
  A deliberately vulnerable social network

  Java

  •

  GNU General Public License v3.0

  •23•2•6•4•Updated Feb 22, 2023Feb 22, 2023

• sbt-rats

  Public
  sbt-rats provides a plugin that enables the Rats! parser generator to be used in Scala projects.

  Java

  •

  Other

  •2•0•0•0•Updated Aug 18, 2021Aug 18, 2021

• JavaVulnerableLab

  Public
  Vulnerable Java based Web Application

  Java

  •

  GNU General Public License v2.0

  •510•2•0•1•Updated Aug 5, 2021Aug 5, 2021

• durian

  Public
  a vulnerable Express application

  JavaScript

  •16•1•0•0•Updated Jul 22, 2021Jul 22, 2021

• PRCommentTest

  Public
  0•0•0•0•Updated Jun 28, 2021Jun 28, 2021

• goof

  Public
  Super vulnerable todo list application

  JavaScript

  •

  Apache License 2.0

  •3.4k•0•0•0•Updated Jun 21, 2021Jun 21, 2021

• Python-Client-API

  Public
  SendSafely API for Python

  Python

  •9•0•0•0•Updated May 28, 2021May 28, 2021

• dead-simple-express

  Public
  a secure express js starter kit

  JavaScript

  •

  MIT License

  •1•1•1•3•Updated May 6, 2021May 6, 2021

• tunelist

  Public
  This script accepts a list of urls, applies tuning, & removes redundancies, and outputs the normalized list

  Python

  •

  MIT License

  •0•2•0•0•Updated Feb 23, 2021Feb 23, 2021

• underscore

  Public
  JavaScript's utility _ belt

  JavaScript

  •

  Other

  •5.5k•0•0•0•Updated Oct 24, 2020Oct 24, 2020

• sarif-scala

  Public
  SARIF object model in Scala

  Scala

  •0•0•0•1•Updated Aug 10, 2020Aug 10, 2020

• find-sec-bugs

  Public
  The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

  Java

  •

  GNU Lesser General Public License v3.0

  •481•0•0•0•Updated Oct 25, 2019Oct 25, 2019

• channels_rabbitmq

  Public
  A Django Channels channel layer that uses RabbitMQ as its backing store

  Python

  •17•0•0•0•Updated Jul 25, 2019Jul 25, 2019

• nessus-api

  Public
  Nessus API interface for node.js.

  JavaScript

  •3•0•1•1•Updated May 9, 2019May 9, 2019

• capnproto-java

  Public
  Cap'n Proto in pure Java

  Java

  •

  Other

  •89•0•0•0•Updated Mar 23, 2019Mar 23, 2019

• pycapnp

  Public
  Cap'n Proto serialization/RPC system - Python bindings

  Python

  •

  BSD 2-Clause "Simplified" License

  •133•0•0•1•Updated Feb 5, 2019Feb 5, 2019

• Benchmark

  Public
  OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, i…

  Java

  •

  GNU General Public License v2.0

  •1.4k•0•0•0•Updated Feb 2, 2019Feb 2, 2019

• hibernate-orm

  Public
  Hibernate's core Object/Relational Mapping functionality

  Java

  •3.7k•0•0•0•Updated Jan 16, 2019Jan 16, 2019

• cas

  Public
  Apereo CAS - Enterprise Single Sign On for all earthlings and beyond.

  Java

  •

  Apache License 2.0

  •4k•0•0•0•Updated Jan 16, 2019Jan 16, 2019

• pinpoint

  Public
  Pinpoint is an open source APM (Application Performance Management) tool for large-scale distributed systems written in Java.

  Java

  •

  Apache License 2.0

  •3.8k•0•0•0•Updated Jan 16, 2019Jan 16, 2019

• aws-sdk-java

  Public
  The official AWS SDK for Java.

  Java

  •

  Apache License 2.0

  •2.8k•0•0•0•Updated Jan 15, 2019Jan 15, 2019

• mall

  Public
  mall项目是一套电商系统，包括前台商城系统及后台管理系统，基于SpringBoot+MyBatis实现。 前台商城系统包含首页门户、商品推荐、商品搜索、商品展示、购物车、订单流程、会员中心、客户服务、帮助中心等模块。 后台管理系统包含商品管理、订单管理、会员管理、促销管理、运营管理、内容管理、统计报表、财务管理、权限…

  Java

  •

  MIT License

  •30k•1•0•0•Updated Jan 14, 2019Jan 14, 2019

• brightspot-cms

  Public
  Brightspot is an enterprise user experience platform built on top of the Dari Framework.

  Java

  •

  Other

  •55•0•0•0•Updated Dec 21, 2018Dec 21, 2018