irsdl Goto Github PK

afrog

A Security Tool for Bug Bounty, Pentest and Red Teaming.

autorize

Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests

awesome-waf

🔥 Everything awesome about web-application firewalls (WAF).

awsscrape

A tool to scrape the AWS ranges looking for a keyword in SSL certificate data.

ayfabtu

Scripts to extract files from SCM directories left on web servers

bchecks

BChecks collection for Burp Suite Professional

blackboxprotobuf

Blackbox protobuf is a Burp Suite extension for decoding and modifying arbitrary protobuf messages without the protobuf type definition.

blazortrafficprocessor

btopenzoneautomation

This will automate the process of connecting to BT Openzone for allowed users in Linux

bugbounty-openvpn-socks

Run all your bug bounty VPN profiles in parallel and expose them via multiple local SOCKS proxies.

burp-suite-extender-montoya-course

This repository contains all the examples related to a series of tutorials that demonstrate how to use the new Montoya API of Burp Suite to create extensions that will greatly simplify our pentester lives.

burpextenderutilities

A collection of utilities to simplify the creation of Burp Suite plugins

burprunnershells

This makes it easier to open and run the latest version of Burp Suite via terminal or command line

burpsuiteextensionjavatemplate

A Burp Suite Extension Template Which Uses Java

burpsuitehttpsmuggler

A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques

burpsuitejsbeautifier

Burp Suite JS Beautifier

burpsuitesharpenerex

This extension enhances Burp Suite by adding several UI and functional features, making it more user-friendly.

burptabessentials

This changes the style of Burp Suite's Repeater tabs to help the testers

channelguide

check_mdi

Python script to enumerate valid Microsoft 365 domains, retrieve tenant name, and check for an MDI instance.

clairvoyance

Obtain GraphQL API schema even if the introspection is disabled

client-side-prototype-pollution

Prototype Pollution and useful Script Gadgets

cloudrecon

collaborator-everywhere

A Burp Suite Pro extension which augments your proxy traffic by injecting non-invasive headers designed to reveal backend systems by causing pingbacks to Burp Collaborator

collaboratorplusplus

conferences

Conference slides

crosssitecontenthijacking

Content hijacking proof-of-concept using Flash, PDF and Silverlight

cve-2021-44228-apache-log4j-rce

Apache Log4j 远程代码执行

de4dot

.NET deobfuscator and unpacker.

defcon-31-syscalls-workshop

Contains all the material from the DEF CON 31 workshop "(In)direct Syscalls: A Journey from High to Low".