Firebase pentest checklist as an agent skill, with automatic OpenFirebase setup

A practical Firebase pentest checklist covering Auth, Realtime database, Firestore, Storage, Remote Config, Functions, FDL, and IAM. Includes OpenFirebase commands and clear finding criteria per se…

wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain

Security audit tool for Active Directory. Automates a lot of checks from a pentester perspective.

Automated Firebase recon and security scanner. Extracts from APKs, IPAs or web and checks for unauthorized read and write access on Firestore, Realtime Database, Storage buckets, Remote Config, Clo…

AWS security scanner that finds hardcoded secrets and internet-exposed resources across all regions and 30+ AWS services.

Secure npm, pnpm, Yarn, and Bun installs by running install scripts in a sandbox with restricted filesystem access, filtered network egress, and a temporary home directory.

Stream any movie or TV show in sync with friends. Inlcudes W2G chatrooms. No torrenting or complex infra setup.

Wordlists for fuzzing Firebase Cloud Functions and Firestore collections, mined from public GitHub source code. Ranked by real-world usage across thousands of repos. Drop-in for OpenFirebase, Fuff …

Security tool to easily exploit Firebase and show impact, if you manage to find a leaked service account and its private key

Web application with common vulnerabilities for testing/assessments

Build Netexec binary for ARM64 with dockerfile

Detects anti-AiTM measures in company branding custom CSS files

List drivers with install date (workaround for empty InstallDate in Win32_SystemDriver)