Pinned Loading

1. find-sec-bugs/find-sec-bugs find-sec-bugs/find-sec-bugs Public

   The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

   Java 2.4k 484

2. GoSecure/dtd-finder GoSecure/dtd-finder Public

   List DTDs and generate XXE payloads using those local DTDs.

   Kotlin 661 116

3. http-script-generator http-script-generator Public

   ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks)

   Java 301 63

4. burp-retire-js burp-retire-js Public

   Burp/ZAP/Maven extension that integrate Retire.js repository to find vulnerable Javascript libraries.

   JavaScript 214 52

5. GoSecure/csp-auditor GoSecure/csp-auditor Public

   Burp and ZAP plugin to analyse Content-Security-Policy headers or generate template CSP configuration from crawling a Website

   Java 143 29

6. bandlogos bandlogos Public

   BandLogos is a simple application that generate a banner of logos based on your last.fm statistics. At its peak, it had over 100k users.

   PHP 16 9