TheMonada

Swagger UI >=3.14.1 < 3.38.0 XSS payload

CSRF Helper is a tool designed to generate and test proofs of concept for Cross-Site Request Forgery (CSRF) attacks. It allows users to input a specific HTTP request and automatically generates a CSRF attack scenario. The generated proof of concept can be copied to the clipboard or downloaded as an HTML file for further testing and analysis.

Script to help security analysts identify misconfigured Firebase instances.

Malicious Wordpress plugin generator that provides a reverse shell once installed on the target application.

Simple bash script that starts frida on android and adds Burpsuites CA Cert to the system folder.

magik_monkee is a Python-based tool designed to test file upload vulnerabilities in web applications. It utilizes a JSON-based database of "magic bytes" or file signatures to identify file types accurately. By replacing the magic bytes of a selected file extension, magik_monkee generates a new file preserving the original content.

Automated tool to scan source code locally