Luis Fontes

xxexploiter. Tool to help exploit XXE vulnerabilities

CSRFER. Tool to generate csrf payloads based on vulnerable requests

vscode-swissknife. Scriptable VSCode extension to generate or manipulate data. Stop pasting sensitive data in webpages.

orgsec-guide. A comprehensive checklist and guide for organizations looking to implement a robust cybersecurity program

slither-static-analysis-action. Github action for Slither Static Analyser for Solidity smart contracts

npm-audit-action. Run npm audit from a github action. Also creates PRs for the fixes

SharpCorsProxy. Cors Proxy in CSharp

TheFatRat. Thefatrat a massive exploiting tool revealed >> An easy tool to generate backdoor and easy tool to post exploitation attack like browser attack,dll . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .

chrome-url-redirector. Redirect aliases for URL addresses

pwndoc. Pentest Report Generator

thecombiner. Combines supplied words and generates all possible combinatios/permutations. Can also hash wordlist entries to look for an hash match

java_undetectable_meterpreter. Java application with meterpreter. AV evasion

watchtower. 🛡️ VSCode extension that scans your workspace for malicious configurations, invisible Unicode threats, and dangerous IDE attack vectors — fully local, fully open source.

zipbomb. Port to github of the zipbomb code from https://www.bamsoftware.com/hacks/zipbomb/

coup-sheet. TypeScript

homekit-code-generator. Generate Homekit QRcodes or Tags online

nicebook. Simple markdown to pdf generation with tons of customizations

dnd-sheet. HTML D&D Character Sheet

aikido-safe-chain-action. Dockerfile

living-off-the-code. A curated list of attack techniques that target software developers in their natural habitat: code.