jwtXploiter

pentest-tools

A collection of custom security tools for quick needs.

jwtcat

A CPU-based JSON Web Token (JWT) cracker and - to some extent - scanner.

exploit-writing-for-oswe

Tips on how to write exploit scripts (faster!)

pythonista-module-versions

Compare the version numbers of extra modules in Pythonista with PyPI

jiraffe

One stop place for exploiting Jira instances in your proximity

jwt_tool

A toolkit for testing, tweaking and cracking JSON Web Tokens

LANs.py

Inject code and spy on wifi users

pentest-notes

tplmap

Server-Side Template Injection and Code Injection Detection and Exploitation Tool

Vxscan

python3写的综合扫描工具，主要用来存活验证，敏感文件探测(目录扫描/js泄露接口/html注释泄露)，WAF/CDN识别，端口扫描，指纹/服务识别，操作系统识别，POC扫描，SQL注入，绕...

oxasploits

A number of exploits and tools I've written for CVEs accredited to Marshall Whittaker/oxagast

TIDoS-Framework

The Offensive Manual Web Application Penetration Testing Framework.

DSXS

Damn Small XSS Scanner

psak

The Pentester's Swiss Army Knife

JSShell

An interactive multi-user web JS shell