Code Pulse is a real-time code coverage tool for penetration testing activities

Automated login tests for Mozilla relying parties (RPs).

The Magic Mask for Android

自动化检测页面是否存在XSS和CSRF漏洞的浏览器插件(A plugin for browser that checks automatically whether a page haves XSS and CSRF vulnerabilities)

Example Firefox add-ons created using the WebExtensions API

Modern super user interface implementation on Android.

📦 Workbox: JavaScript libraries for Progressive Web Apps

Web app that provides basic navigation and annotation of ATT&CK matrices

Mozilla HTTP Observatory

Auth0 AD and LDAP connector

translated strings for fxa-content-server

Tools for security content automation, baseline tailoring, and overlay development.

Sample code for the book "5 Simple Steps Fast Reads: Build Tools" by Gavin Davies

Change Integration related scripts and code for Auth0. Can be used for any Auth0 deployment, but that's what we use.

Set of useful android network tools

A cross-platform java application for decoding, monitoring, recording and streaming trunked mobile and related radio protocols using Software Defined Radios (SDR). Website:

Xerxes dos tool enhanced

Web path scanner

Scan files and folders for username & password combinations.

A collection of useful .gitignore templates

PhEmail is a python open source phishing email tool that automates the process of sending phishing emails as part of a social engineering test

OpenID Connect Relying Party implementation for Apache HTTP Server 2.x

Global coverage report uploader for Codecov

An alternate view of crash and stability

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

A repo containing samples tied to new functionality in each release of Google Chrome.

Python 3 implementation of the VirusTotal v3 API

Scanning pastebin with yara rules