bayo

off-by-slash. Burp extension to detect alias traversal via NGINX misconfiguration at scale.

sink-logger. Transparently log all data passed into known JavaScript sinks - Sink Logger extension for Burp.

firefox-names. Periodically updated lists of interesting Firefox (gecko) "names".

chrome-names. Periodically updated lists of interesting Chrome (blink) "names".

resdiffcheck. Script to track updates on web resources (mainly JS files or whole HTML pages).

tls-parser. C

send. Secure data sharing via websockets.

dprf. Distributed Password Recovery Framework