Skip to content
@doyensec

Doyensec

Doyensec works at the intersection of software development and offensive engineering. We discover vulnerabilities others cannot, and help mitigate the risk.

Popular repositories Loading

  1. inql inql Public

    InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

    Kotlin 1.6k 165

  2. electronegativity electronegativity Public

    Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron applications.

    JavaScript 993 68

  3. regexploit regexploit Public

    Find regular expressions which are vulnerable to ReDoS (Regular Expression Denial of Service)

    Python 804 58

  4. awesome-electronjs-hacking awesome-electronjs-hacking Public

    A curated list of awesome resources about Electron.js (in)security

    625 63

  5. burpdeveltraining burpdeveltraining Public

    Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"

    Java 352 70

  6. wsrepl wsrepl Public

    WebSocket REPL for pentesters

    Python 219 15

Repositories

Showing 10 of 57 repositories
  • osv-scalibr Public Forked from google/osv-scalibr
    Go 0 Apache-2.0 38 0 0 Updated Apr 25, 2025
  • security-testbeds Public Forked from google/security-testbeds
    Python 0 Apache-2.0 35 0 1 Updated Apr 18, 2025
  • tsunami-security-scanner-plugins Public Forked from google/tsunami-security-scanner-plugins

    This project aims to provide a central repository for many useful Tsunami Security Scanner plugins.

    Java 0 Apache-2.0 208 0 0 Updated Apr 18, 2025
  • inql Public

    InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

    Kotlin 1,615 Apache-2.0 165 30 (3 issues need help) 1 Updated Apr 16, 2025
  • CSPTPlayground Public

    CSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT).

    JavaScript 116 Apache-2.0 11 0 0 Updated Mar 31, 2025
  • malicious-devfile-registry Public

    Exploit for CVE-2024-0402 in Gitlab

    Dockerfile 12 5 0 0 Updated Mar 18, 2025
  • GQLSpection Public

    GQLSpection - parses GraphQL introspection schema and generates possible queries

    Python 84 Apache-2.0 11 7 (1 issue needs help) 2 Updated Mar 6, 2025
  • SSHNuke_info Public

    SSH Nuke Info

    C 4 0 0 0 Updated Mar 4, 2025
  • ComfyUI-tsunami-payload Public
    Python 0 0 0 0 Updated Mar 3, 2025
  • awesome-electronjs-hacking Public

    A curated list of awesome resources about Electron.js (in)security

    625 63 0 0 Updated Mar 1, 2025
View all repositories

Top languages

Loading…

Most used topics

Loading…