Ryan Cartner

sourcemapper. Reconstruct javascript from a sourcemap in bash

sprawl. Expand urls into one url for each path depth

entro.py. Search files for high entropy strings.

ssslide. View screenshots as a slideshow over http

memento.py. Find endpoints in archived versions of robots.txt

normal.py. Find unicode codepoints to use in normalisation and transformation attacks.

whorl. LLM fingerprinting

gitall. Bash script to download all repos associated with an org and its members

cql. CodeQL Testing

40x.py. Build a wordlist of bypass payloads for a given 403/401 url.

internals.py. take a list of domains or ips on stdin and return only those that point to private / internal ipv4 or ipv6 addresses.

getips. Take a list of hostnames on stdin and output IPs

jwtnone.py. Tamper with JWT tokens and re-encode them with alg=none

zipfinder.py. Create a wordlist for finding archived backups based on discovered content.

hashes. Quickly dump a bunch of different hash digests for a given string

frontdoor. A collection of tricks for sneaking code past code reviews.

uc. simple bash script to url encode ascii characters on the commandline

pylight. highlight lines that match a given regex pattern for readability in bash

cidr. Print a list of ip addresses given a cidr range.