CyberChef by gchq

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

updated at June 9, 2024, 5:18 a.m.

380 +4

26,072 +60

3,002 +10

beef by beefproject

The Browser Exploitation Framework Project

updated at June 9, 2024, 4:09 a.m.

439 +0

9,462 +16

2,078 +6

DOMPurify by cure53

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

updated at June 8, 2024, 6:48 p.m.

150 +1

13,075 +39

680 +2

H5SC by cure53

HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors

updated at June 8, 2024, 5:33 p.m.

153 +0

2,821 +1

417 +0

AwesomeXSS by UltimateHackers

Awesome XSS stuff

updated at June 7, 2024, 5:24 p.m.

240 +0

4,673 +7

759 +1

retire.js by RetireJS

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

updated at June 7, 2024, 2:52 p.m.

86 +0

3,575 +15

413 +1

whonow by brannondorsey

A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)

updated at June 6, 2024, 5:25 p.m.

22 +0

615 +3

102 +0

singularity by nccgroup

A DNS rebinding attack framework.

updated at June 6, 2024, 5:58 a.m.

32 +0

992 +2

136 +1

xssor2 by evilcos

XSS'OR - Hack with JavaScript.

updated at June 5, 2024, 1:12 p.m.

95 +0

2,104 +2

378 +0

reverse-shell by lukechilds

Reverse Shell as a Service

updated at June 4, 2024, 4:32 a.m.

33 +0

1,799 +1

229 -1

dref by mwrlabs

DNS Rebinding Exploitation Framework

updated at June 1, 2024, 1:12 a.m.

25 +0

481 +0

71 +0

bXSS by LewisArdern

bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.

updated at May 31, 2024, 5:37 p.m.

14 +0

488 +0

64 +0

malware-jail by HynekPetrak

Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js

updated at May 31, 2024, 2:30 a.m.

46 +0

454 +0

99 +0

BadLibrary by SecureSkyTechnology

vulnerable web application for training

updated at May 14, 2024, 8:50 a.m.

20 +0

57 +0

7 +0

repo-supervisor by auth0

Scan your code for security misconfiguration, search for passwords and secrets.

updated at May 5, 2024, 6:14 a.m.

33 +0

633 +0

101 +0

dns-rebind-toolkit by brannondorsey

A front-end JavaScript toolkit for creating DNS rebinding attacks.

updated at April 30, 2024, 6:13 p.m.

24 +0

481 +0

93 +0