DoI

sourcemapper. Extract JavaScript source trees from Sourcemap files

KeeFarce. Extracts passwords from a KeePass 2.x database, directly from memory.

fuzzotron. A TCP/UDP based network daemon fuzzer

glorp. A CLI-based HTTP intercept and replay proxy

lpc_sniffer_tpm. A low pin count sniffer for ICEStick - targeting TPM chips

SecretServerSecretStealer. Powershell script that decrypts the data stored within a Thycotic Secret Server

5am_util. A utility for reading/writing Magneti Marelli IAW5AM firmware

libmutator. A C library for mutating test cases

OpManager-Decrypter. Some simple scripts for decrypting passwords retrieved from a Manage Engine OpManager installation

rpzero-usb-uart. RP2040-zero USB to UART adapter with ESP32 flashing support

httpstream2tcp. HTTP chunked encoded streams to TCP sockets with Rust and Hyper

GWT-Penetration-Testing-Toolset. A set of tools made to assist in penetration testing GWT applications. Additional details about these tools can be found on my OWASP Appsec DC slides available here: http://www.owasp.org/images/7/77/Attacking_Google_Web_Toolkit.ppt

cmtscrack. Cracker for DOCSIS CMTSMICs

4AGE-Intake-Parts. Velocity stacks and adapter plates for 4AGE ITB engines

ZTCrack. A proof-of-concept Zerotier identity generator in CUDA

authorative. An authenticating reverse proxy with TOTP support

SmolWeldingTable. A smol (550x1200) welding table for 16mm-50x50 grid fixture tooling

password-store. Read-only mirror of https://git.zx2c4.com/password-store - https://www.passwordstore.org/ . Pull requests and issues on GitHub cannot be accepted and will be automatically closed. The proper way to submit changes is via the mailing list; see https://lists.zx2c4.com/mailman/listinfo/password-store .

PayloadsAllTheThings. A list of useful payloads and bypass for Web Application Security and Pentest/CTF

ffuf. Fast web fuzzer written in Go

RequestAADRefreshToken. C#