Jobert Abma

relative-url-extractor. A small tool that extracts relative URLs from a file.

virtual-host-discovery. A script to enumerate virtual hosts on a server.

ground-control. A collection of scripts that run on my web server. Mainly for debugging SSRF, blind XSS, and XXE vulnerabilities.

recon.sh. A toolset to track and organize output of reconnaissance tools

transformations. JavaScript

unescape-room. JavaScript

vulnerable. A Rails application containing multiple vulnerabilities used for demonstration purposes

h1-212-ctf-files. HTML

hackerone-api-exercise. Ruby

twofactorauth. List of sites with two factor auth support which includes SMS, email, phone calls, hardware, and software.

arcanist-vim. Vim Script

ruby-conduit. Ruby