Willis Vandevanter

oxml_xxe. A tool for embedding XXE/XML exploits into different filetypes

Serpico. SimplE RePort wrIting and COllaboration tool

burpsuite-project-file-parser. A Burp Suite Extension for parsing Project Files from the CLI.

whoiswatcher. Do bulk whois lookups and get alerted on domains of interest.

gumbler. Dig through Git commits and logs

gatling_gun. Basic script to rotate through reverse SSH proxies built through EC2, useful for obfuscating (weakly anonymizing) your source. Nice for bypassing/slowing down IP based IDS/IPS.

odle. An easy to use security data parsing tool. Takes in data from different tools and outputs standardized JSON.

BChecksPublic. A collection of BurpSuite BChecks

awesome-whois-resources.

lucee-webshells. A tool for building Lucee extensions including remote code execution

cloud-herder. A plug-in for Metasploit that utilizes the fog driver to manage cloud instances to perform tasks.

find-sec-bugs. The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Groovy and Scala projects)

gf. A wrapper around grep, to help you grep for things