CloudMapper helps you analyze your Amazon Web Services (AWS) environments.

Javascript QRCode scanner

A collaborative, multi-platform, red teaming framework

WarBerryPi - Tactical Exploitation

Visualize Solidity control flow for smart contract security analysis. 💵 ⇆ 💵

A DNS rebinding attack framework.

VSAQ is an interactive questionnaire application to assess the security programs of third parties.

A repository for maintaining lists of things like malicious URLs, fake token addresses, and so forth. We love lists.

A tool designed to assist with finding all sinks and sources of a web application and display these results in a digestible manner.

CLI tool to manage a SIFT Install

DEPRECATED - Migrated to https://github.com/mozilla/fxa

[deprecated] Lazarsoft's jsqrcode as a node module, object oriented, and with tests

JavaScript for Automation (JXA) tool to do Active Directory enumeration.

An Ethereum ÐApp (a "contract"), living on the blockchain, that could have made you a King or Queen, granted you riches, or immortalized your name. It's no longer updated, but visit kingoftheether.…

Data exfiltration using reflective DNS resolution covert channel

Various browser userscripts I created/maintain

The pie chart reporting app is a user-friendly tool for viewing reports about internal Macs' properties. These reports are obtained through data obtained from a Jamf Pro endpoint management system …

BIP32 is a Brainwallet-based implementation for BIP0032 deterministic wallet generation