Java port of Google Prettify - (mirror of http://gerrit.googlesource.com/java-prettify)

Burpsuite extension. Supports CJK (Chinese, Japanese, Korean) encoding.

WinDivert: Windows Packet Divert

An helper library for those that want to play around with Unity il2cpp games.

Burp suite Certificate modification tool

A graphical tool that can extract and replace files from encrypted and non-encrypted iOS backups

Java Object Deserialization on Android

Burpsuite extension. Supports ASP.NET ViewStateDecoder

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

Source code for OAuth 2 in Action

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

SAKURA Editor (Japanese text editor for MS Windows)

Powerful and extensible proxy server with anti-censorship functionality for Android

Clone this repo to build Frida

Manual JavaScript Linting is a Bug

A local proxy written in Java

This repository contains struts examples. Yes... Old shit technologies... Sometimes we also have to support them =\

It decompiles target apk and adds security exception to accept all certificates thus making able to work with Burp/Charles and Other Tools