Max

JSA. Javascript security analysis (JSA) is a program for javascript analysis during web application security assessment.

bugbounty_changelogs.

Open_Redirects_list. -

chaos-hacks.

totally-not-web-hacking. Python

GoogD0rker. GoogD0rker is a tool for firing off google dorks against a target domain, it is purely for OSINT against a specific target domain. READ the readme before messaging or tweeting me.

CSPBypass. JavaScript

pentest-tools. Custom pentesting tools

subjack. Subdomain Takeover tool written in Go

PayloadsAllTheThings. A list of useful payloads and bypass for Web Application Security and Pentest/CTF

urlwatch. urlwatch monitors webpages for you

SecretFinder. SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

hacks. A collection of hacks and one-off scripts

recollapse. REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications

nuclei-templates. Community curated list of templates for the nuclei engine to find a security vulnerability in application.

fuzz.txt. Potentially dangerous files

subjs. Fetches javascript file from a list of URLS or subdomains.

slack-unhide. Chrome extension that bypasses the message viewing restriction on UI.