Repositories list

• burp-injector

  Public
  💉 Burp Deep Data Injector is a BurpSuite extension that allows pentesters to define targets within non-standard locations such as encoded regions or serialized data.

  pentesting-toolsburp-extension

  Java

  •

  MIT License

  •1•2•0•0•Updated Aug 29, 2025Aug 29, 2025

• burp-hotpatch

  Public
  Burp Hotpatch ️provides pentesters with a quick way to hook into key BurpSuite functions using user defined scripts.

  Java

  •

  MIT License

  •0•2•9•0•Updated Aug 21, 2025Aug 21, 2025

• burp-magicvars

  Public
  🪄 Magic variables is a Burp extension that provides helpful replacements in traffic such as random integers, random UUIDs and random strings.

  pentesting-toolsburp-extension

  Java

  •

  MIT License

  •1•1•5•0•Updated Aug 8, 2025Aug 8, 2025

• easy-turbo-intruder

  Public
  A workflow that builds the newest standalone version of PortSwigger's turbo-intruder.jar file

  0•0•0•0•Updated May 30, 2025May 30, 2025

• reconftw_box

  Public
  Offloading reconftw to a separate instance so we don't clog up network traffic and hog our local resources

  Shell

  •0•0•6•0•Updated May 24, 2023May 24, 2023

• FaceBroke

  Public
  A deliberately vulnerable social network

  Java

  •

  GNU General Public License v3.0

  •23•2•6•4•Updated Feb 22, 2023Feb 22, 2023

• sbt-rats

  Public
  sbt-rats provides a plugin that enables the Rats! parser generator to be used in Scala projects.

  Java

  •

  Other

  •2•0•0•0•Updated Aug 18, 2021Aug 18, 2021

• JavaVulnerableLab

  Public
  Vulnerable Java based Web Application

  Java

  •

  GNU General Public License v2.0

  •491•2•0•1•Updated Aug 5, 2021Aug 5, 2021

• durian

  Public
  a vulnerable Express application

  JavaScript

  •16•1•0•0•Updated Jul 22, 2021Jul 22, 2021

• PRCommentTest

  Public
  0•0•0•0•Updated Jun 28, 2021Jun 28, 2021

• goof

  Public
  Super vulnerable todo list application

  JavaScript

  •

  Apache License 2.0

  •3.3k•0•0•0•Updated Jun 21, 2021Jun 21, 2021

• Python-Client-API

  Public
  SendSafely API for Python

  Python

  •7•0•0•0•Updated May 28, 2021May 28, 2021

• dead-simple-express

  Public
  a secure express js starter kit

  JavaScript

  •

  MIT License

  •1•1•1•3•Updated May 6, 2021May 6, 2021

• tunelist

  Public
  This script accepts a list of urls, applies tuning, & removes redundancies, and outputs the normalized list

  Python

  •

  MIT License

  •0•2•0•0•Updated Feb 23, 2021Feb 23, 2021

• underscore

  Public
  JavaScript's utility _ belt

  JavaScript

  •

  Other

  •5.5k•0•0•0•Updated Oct 24, 2020Oct 24, 2020

• sarif-scala

  Public
  SARIF object model in Scala

  Scala

  •0•0•0•1•Updated Aug 10, 2020Aug 10, 2020

• find-sec-bugs

  Public
  The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

  Java

  •

  GNU Lesser General Public License v3.0

  •482•0•0•0•Updated Oct 25, 2019Oct 25, 2019

• channels_rabbitmq

  Public
  A Django Channels channel layer that uses RabbitMQ as its backing store

  Python

  •16•0•0•0•Updated Jul 25, 2019Jul 25, 2019

• nessus-api

  Public
  Nessus API interface for node.js.

  JavaScript

  •3•0•1•1•Updated May 9, 2019May 9, 2019

• capnproto-java

  Public
  Cap'n Proto in pure Java

  Java

  •

  Other

  •89•0•0•0•Updated Mar 23, 2019Mar 23, 2019

• pycapnp

  Public
  Cap'n Proto serialization/RPC system - Python bindings

  Python

  •

  BSD 2-Clause "Simplified" License

  •128•0•0•1•Updated Feb 5, 2019Feb 5, 2019

• Benchmark

  Public
  OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually expl…

  Java

  •

  GNU General Public License v2.0

  •1.3k•0•0•0•Updated Feb 2, 2019Feb 2, 2019

• hibernate-orm

  Public
  Hibernate's core Object/Relational Mapping functionality

  Java

  •3.7k•0•0•0•Updated Jan 16, 2019Jan 16, 2019

• cas

  Public
  Apereo CAS - Enterprise Single Sign On for all earthlings and beyond.

  Java

  •

  Apache License 2.0

  •4k•0•0•0•Updated Jan 16, 2019Jan 16, 2019

• pinpoint

  Public
  Pinpoint is an open source APM (Application Performance Management) tool for large-scale distributed systems written in Java.

  Java

  •

  Apache License 2.0

  •3.8k•0•0•0•Updated Jan 16, 2019Jan 16, 2019

• aws-sdk-java

  Public
  The official AWS SDK for Java.

  Java

  •

  Apache License 2.0

  •2.8k•0•0•0•Updated Jan 15, 2019Jan 15, 2019

• mall

  Public
  mall项目是一套电商系统，包括前台商城系统及后台管理系统，基于SpringBoot+MyBatis实现。 前台商城系统包含首页门户、商品推荐、商品搜索、商品展示、购物车、订单流程、会员中心、客户服务、帮助中心等模块。 后台管理系统包含商品管理、订单管理、会员管理、促销管理、运营管理、内容管理、统计报表、财务管理、权限管理、设置等模块。

  Java

  •

  MIT License

  •29k•1•0•0•Updated Jan 14, 2019Jan 14, 2019

• brightspot-cms

  Public
  Brightspot is an enterprise user experience platform built on top of the Dari Framework.

  Java

  •

  Other

  •57•0•0•0•Updated Dec 21, 2018Dec 21, 2018

• deserial

  Public
  Eases the creation of Java Serialization payloads

  Java

  •

  MIT License

  •0•0•0•0•Updated Dec 3, 2018Dec 3, 2018

• oscar

  Public
  OSCAR EMR, Mirror of https://bitbucket.org/oscaremr/oscar

  Java

  •

  GNU General Public License v2.0

  •23•0•0•0•Updated Nov 30, 2018Nov 30, 2018