Krzysztof Kotowicz

xsschef. Chrome extension Exploitation Framework

mosquito. XSS exploitation tool - access victims through HTTP proxy

blog-kotowicz-net-examples. Code Examples for blog.kotowicz.net

phar-util. PharUtil - Security-oriented utilities for Phar archives

socket_io_client. Python tool for testing vulnerabilities in WebSockets / Socket.IO servers

gitpillage. Pillage a git repo found in an accessible web root

squid-imposter. Phishing attack w/HTML5 offline cache framework based on Squid proxy

owasp-malicious-javascript. Materials for OWASP presentation on malicious JavaScript

svn-tools. Various command-line utilities for Subversion users

sslstrip. A tool for exploiting Moxie Marlinspike's SSL "stripping" attack.

httpfileserver. Simple PHP REST file server implementation. You put and retrieve files using any HTTP client e.g. wget

cors-proxy-browser. CORS based proxy (with Flash backend, remote control, MalaRIA integration and more goodies)

ajax-upload. Use AJAX Upload to upload multiple files without refreshing the page and style upload button as you wish.

iplex_adblock. Adblock HTTP proxy server for iplex.pl movies

Demo-ClientsideWebAttacks. Demonstration of some client-side web application vulnerabilities (DOM XSS, Clickjacking) and wrong usage of local storage.

exceed-mitm. Exceed OnDemand MITM proof-of-concept

htshells. Self contained htaccess shells and attacks

websockify. Add WebSockets support to any application/server (formerly wsproxy)

DeathToDSStore. .DS_Store is an abomination and must be stopped.

react. A declarative, efficient, and flexible JavaScript library for building user interfaces.

visipisi.

WebFundamentals. Best practices for modern web development

beef. The Browser Exploitation Framework Project

reconnecting-websocket. A small decorator for the JavaScript WebSocket API that automatically reconnects

projects. JavaScript

SQLol. A configurable SQL injection test-bed

MotionCAPTCHA. MotionCAPTCHA jQuery Plugin - Stop Spam, Draw Shapes

node-shells. JavaScript

html5demos. Collection of hacks and demos showing capability of HTML5 apps

burp-extensions. Various small Burp extensions

phpbb3. phpBB 3 Development: phpBB is a popular open-source bulletin board written in PHP. This repository also contains the history of version 2.

mitmproxy. An interactive SSL-capable intercepting HTTP proxy for penetration testers and software developers

react-redux-realworld-example-app. Exemplary real world application built with React + Redux

libs. Coleção de classes PHP com propósitos diversos

MalaRIA-Proxy. Proof of concept code (which means poor code quality) for a proxy abusing unrestricted cross domain policies.

webpack. A bundler for javascript and friends. Packs many modules into a few bundled assets. Code Splitting allows for loading parts of the application on demand. Through "loaders", modules can be CommonJs, AMD, ES6 modules, CSS, Images, JSON, Coffeescript, LESS, ... and your custom stuff.

node_chat. simple chat demo for node

AjaxFileUpload. A jQuery plugin that simulates asynchronous file uploads.

Socket.IO-node. Sockets for the rest of us (in Node.js)

ICanHaz.js. A clean solution for templating with Mustache.js and jQuery or Zepto

end-to-end-1. End-To-End is a Chrome extension that helps you encrypt, decrypt, digital sign, and verify signed messages within the browser using OpenPGP.

owtf. The Offensive (Web, etc) Testing Framework (aka OWTF) is an OWASP+PTES-focused try to unite great tools and make pen testing more efficient @owtfp

stupid-websocket-tcp-proxy. A very stupid websocket tcp proxy (using websockets with unmodified TCP servers)

pyinotify. Monitoring filesystems events with inotify on Linux.

DOMPurify. DOMPurify

webappsec. Web Application Security Working Group repo

ahDoctrineEasyEmbeddedRelationsPlugin. ahDoctrineEasyEmbeddedRelationsPlugin