A Chrome extension static analysis tool to help aide in security reviews.
☆166Aug 15, 2023Updated 3 years ago
Alternatives and similar repositories for tarnish
Users that are interested in tarnish are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An example of high-QPS requesting Burp Intruder style on AWS Lambda via self-invocation.☆22Nov 15, 2018Updated 7 years ago
- A tool that can help detect and takeover subdomains with dead DNS records☆12Aug 23, 2018Updated 8 years ago
- Slides of the talk on Injection attacks in apps with NoSQL Backends, given at null OWASP Bangalore monthly meet on 27th April 2019☆21Apr 28, 2019Updated 7 years ago
- This repository contains hit lists to use for web application content discovery.☆11May 31, 2017Updated 9 years ago
- ☆25May 9, 2021Updated 5 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Disrupt WAF by abusing SSL/TLS Ciphers☆48Dec 19, 2018Updated 7 years ago
- A penetration testing tool to enumerate and analyse Amazon S3 Buckets owned by a domain.☆26Dec 12, 2018Updated 7 years ago
- This is a Burpsuite plugin built to enable you to import your directory bruteforcing results into burp for easy viewing later. This is an…☆36Mar 1, 2023Updated 3 years ago
- Automate SSH communication with firewalls, switches, etc.☆28Mar 29, 2018Updated 8 years ago
- Neto | A tool to analyse browser extensions☆88Sep 20, 2020Updated 6 years ago
- ☆14Aug 27, 2025Updated last year
- Nameserver DNS poisoning attacks made easy☆527Feb 26, 2017Updated 9 years ago
- yet another dirbuster☆18Jan 14, 2021Updated 5 years ago
- Interactive Post Exploitation Tool☆37Oct 1, 2019Updated 7 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A tool designed to assist with finding all sinks and sources of a web application and display these results in a digestible manner.☆559Mar 6, 2023Updated 3 years ago
- XXRF Shots - Useful for testing SSRF vulnerability☆75Feb 18, 2023Updated 3 years ago
- A project to track ideas needed by the infosec community.☆11Dec 5, 2017Updated 8 years ago
- This Burp Suite extension allows you to customize header with put a new header into HTTP REQUEST BurpSuite (Scanner, Intruder, Repeater, …☆53Mar 29, 2023Updated 3 years ago
- ☆26Apr 5, 2020Updated 6 years ago
- A very simple bridge for performing Flash HTTP requests with JavaScript☆80Jul 21, 2015Updated 11 years ago
- Scripts that I've written that others may find useful☆14Aug 17, 2022Updated 4 years ago
- A tool to generate media files with malicious metadata☆128Feb 2, 2019Updated 7 years ago
- Probe a rendering engine for vulnerabilities and other features☆366Oct 13, 2021Updated 5 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- A better dns bruteforcer written in golang☆13Nov 4, 2018Updated 8 years ago
- Password Lense: reveal character types in a password☆23Oct 18, 2025Updated last year
- Correlated injection proxy tool for XSS Hunter☆256Dec 26, 2022Updated 3 years ago
- The Python Password-Protected Obfuscator☆32Jul 7, 2019Updated 7 years ago
- Unofficial WhatCMS API package☆40Mar 25, 2021Updated 5 years ago
- Collection of scripts that aid in penetration testing of JSON Web Tokens☆58Feb 2, 2019Updated 7 years ago
- pwntools for go!☆12Jul 14, 2019Updated 7 years ago
- Binary String Toolkit (BST). Quickly and easily convert binary strings for all your exploit development needs.☆22Jul 27, 2018Updated 8 years ago
- ☆20Jan 25, 2019Updated 7 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Metasploit Red Team Competition Modules☆13Apr 10, 2011Updated 15 years ago
- VyAPI - A cloud based vulnerable hybrid Android App☆84Feb 21, 2020Updated 6 years ago
- Simple XXE test suite generated specifically for SAML interfaces☆23May 18, 2018Updated 8 years ago
- Powershell script for enumerating vulnerable DCOM Applications☆264Nov 30, 2018Updated 7 years ago
- An enumeration and exploitation toolkit using RFC calls to SAP☆40Jan 8, 2020Updated 6 years ago
- Perform various SMB-related attacks, particularly useful for testing large Active Directory environments.☆41Oct 15, 2022Updated 4 years ago
- DNS Rebinding Exploitation Framework☆494Apr 27, 2021Updated 5 years ago
Are these results useful?