A Dynamic Symbolic Execution (DSE) engine for JavaScript. ExpoSE is highly scalable, compatible with recent JavaScript standards, and supports symbolic modelling of strings and regular expressions.

Simple C compiler

Build DJGPP cross compiler and binutils on Windows (MinGW/Cygwin), Mac OSX and Linux

Monorepo of Labs for the Security Knowledge Framework (SKF)

Symbolic execution for the XorShift128+ algorithm.

Compute Natural Breaks in Python (Fisher-Jenks algorithm)

Continously updated massdns docker that fetches fresh resolvers each run

List of periodically validated public DNS resolvers

Fast web fuzzer written in Go

Port of Wappalyzer (uncovers technologies used on websites) to automate mass scanning.

collection of V8 design documents

Python script to enumerate valid Microsoft 365 domains, retrieve tenant name, and check for an MDI instance.

Azure Service Subdomain Enumeration

Bcheck scripts for Burp

BChecks collection for Burp Suite Professional

BChecks collection for Burp Suite Professional and Burp Suite Enterprise Edition

Burp Extension for a passive scanning JS files for endpoint links.

XSS payloads designed to turn alert(1) into P1

A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure

🌐 Visualize and explore IaC ✒️ Create and share notes in VS Code 🤝 Sync notes and findings in real-time with friends

Differential fuzzing REPL for HTTP implementations.

The Most Advanced Client-Side Prototype Pollution Scanner

🚀 Caido releases, wiki and roadmap

Automation for javascript recon in bug bounty.

Extract URLs, paths, secrets, and other interesting bits from JavaScript