hvqzao Goto Github PK

autorize

Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests

burp-csrf-handling

CSRF tokens handling Burp extension

burp-flow

Extension providing view with filtering capabilities for both complete and incomplete requests from all burp tools.

burp-negotiate

Kerberos / SPNEGO authentication for BurpSuite

burp-rs

Burpsuite-like tool write in rust, extension can be write in ruby

burp-second-order

Extension for semi-automated search for second order issues in webapps

burp-token-rewrite

Burp extension for automated handling of CSRF tokens

burp-wildcard

Burp extension intended to compact Burp extension tabs by hijacking them to own tab.

chatgpt-api

Node.js client for the unofficial ChatGPT API. 🔥

cr-701

endec

Tiny utility to encrypt and decrypt text data using aes-256-cbc algorithm.

evadeav

AV evasion experiment (fail inspired by some blogpost)

foolav

Pentest tool for antivirus evasion and running arbitrary payload on target Wintel host

foolavc

foolav successor - loads DLL, executable or shellcode into memory and runs it effectively bypassing AV

ftcliserv

File Transfer Client-Server

http-flood-netty

Trival HTTP Flood implementation based on Java Netty Framework

ipport

Small subset of Bash and Python scripts which could be used for rapid network recon

java-deserialize-webapp

Vulnerable webapp testbed

java-mq

Example Java MQ client-server (Apache ActiveMQ based) with SSL and authentication support

java-rmi

Example Java RMI client-server both with and without SSL support

java-testbed-webapp

Simple Java webapp used as a testbed for BurpSuite extensions development

javaprefs.io

Java Swing application for easy read-write management of java.util.prefs.Preferences (persistent Java store)

jgantt

jGantt plugin for Atlassian JIRA Kanban board

jsew

.js (or .css or any other you like) files sewing tool. Adds "include" directive with auto-indent handling.

liffy

Local File Inclusion Exploitation Tool (mirror)

portfwd

Simple TCP Port Forwarder utility for both Windows and Linux platforms

portswigger-academy-rust

report-ng

Generate MS Word template-based reports with HP WebInspect / Burp Suite Pro input, own custom data and knowledge base.

sqli-testbed

SQL injection testbed designed for sqlmap practice (MySQL backend)

ts-fe-stub

Simple Next.JS app with Material-UI, written in Typescript