Jonathan Conesa

BypassFuzzer. Fuzz 401/403/404 pages for bypasses

BypassFuzzer-Burp. The Java Burp Extension version of my BypassFuzzer tool

burpcollaborator-docker. A set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard certificate in as simple a process as possible

domainExtractor. Extract domains/subdomains/FQDNs from files and URLs

vm-setup.sh. My handy bash script to quickly set up debian linux VM's how I like em :)

DNS-Rebinder. Modified version of cujanovic's dns.py for DNS Rebinding attacks.

JSCommander. Remotely send JS to execute on clients that connect to your attacker websocket server via XSS.

linuxprivchecker. linuxprivchecker.py -- a Linux Privilege Escalation Check Script (updated for use with Python 3!)

subz. Programmatically uses a few subdomain recon tools to enumerate subdomains for a target domain

ofxpostern. Vulnerability scanner for OFX servers

bambdas-NetSPI. Bambdas collection for Burp Suite Professional and Community.

lottochecker. Check Florida lotto numbers

xsshunter-express. An easy-to-setup version of XSS Hunter. Sets up in five minutes and requires no maintenance!