Take it like a gift

cookie_crimes
cookie_crimes

Read local Chrome cookies without root or decrypting.

cameradar
cameradar

Hacks its way into RTSP videosurveillance cameras.

wmiexec-RegOut
wmiexec-RegOut

Modify version of impacket wmiexec.py, get output from registry.

BurpSentinel
BurpSentinel

GUI Burp Plugin to ease discovering of security holes in web applications.

DumpsterDiver
DumpsterDiver

Tool to search secrets in various filetypes.

DNSExfiltrator
DNSExfiltrator

Data exfiltration over DNS request covert channel.

CDK
CDK

Make security testing of K8s, Docker, and Containerd easier.

csp-analyzer
csp-analyzer

Analyze Content-Security-Policy header of a given URL.

catphish
catphish

Generate similar-looking domains for phishing attacks.

big-list-of-naughty-strings
big-list-of-naughty-strings

A list of strings which have a high probability of causing issues when used as user-input data.

De4py
De4py

toolkit for python reverse engineering.

bxss.net
bxss.net

Web service that allows for detection Blind XSS vulnerabilities within web applications.

bountyplz
bountyplz

Automated security reporting from markdown templates.

cook
cook

Overpower wordlist generator, words permutation and combinations, encoding/decoding...

docker-bench-security
docker-bench-security

Check for dozens of common best-practices around deploying Docker containers in production.