federicodotta

Brida. The new bridge between Burp Suite and Frida!

Java-Deserialization-Scanner. All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities

ghidra2frida. The new bridge between Ghidra and Frida!

ghidra-scripts. A collection of my Ghidra scripts

HandyCollaborator. Burp Suite plugin created for using Collaborator tool during manual testing in a comfortable way!

semgrep-rules. A collection of my Semgrep rules

LetMeHID. LetMeHID is a tool that generates Windows HID payloads to obtain bind or reverse access using Raspberry PI0 and P4wnP1 A.L.O.A.

Burp-Suite-Extender-Montoya-Course. This repository contains all the examples related to a series of tutorials that demonstrate how to use the new Montoya API of Burp Suite to create extensions that will greatly simplify our pentester lives.

ysoserial. A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

protobuf-decoder. A simple Google Protobuf Decoder for Burp

BurpJDSer-ng-edited. Burp Suite plugin that allow to deserialize Java objects and convert them in an XML format. Unpack also gzip responses. Based on BurpJDSer-ng of omercnet.

proxmark3. Proxmark 3 - HID Corporate 1000 bruteforce

Exploit. A collection of exploits created or modified by me

AI-Reporter. A Burp Suite extension that uses Burp AI or local LLMs to automatically generate vulnerability reports from HTTP request/response pairs

RestoringTestability. Stuff of my talk "Restoring Testability - Handling complex scenarios in Burp Suite with a custom extension"