HackVault
OwlMarble-Magic
| HackVault | OwlMarble-Magic | |
|---|---|---|
| 3 | 1 | |
| 1,876 | 1 | |
| - | - | |
| 0.0 | 4.9 | |
| over 1 year ago | 3 days ago | |
| JavaScript | JavaScript | |
| - | - |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
HackVault
- What are polyglots and how to use them as a pentester
- Stored XSS, without alert
-
Show HN: QuikPub – Write, Publish and Share rich text via short URLs
Definitely use a battle-tested HTML sanitization library if possible. There's a million different pitfalls and footguns with XSS. See: Some of the insane XSS polyglots out there that can be used for testing.
https://github.com/0xsobky/HackVault/wiki/Unleashing-an-Ulti...
OwlMarble-Magic
-
Homebrews solve most of this subreddits complaints about 5e, but we need actual reviews or no one will ever try them.
For my own content, I'm sitting on literal hundreds of homebrew spells, and I would love to present them to the world for commentary, feedback, and to enhance the games of others, but there simply isn't a great way to do that. If I post spells one at a time, that's just spammy. If I do it in bulk, the quality of commentary declines drastically as readers tend to just stop on the first one they happen to think is broken and pan the whole post.
What are some alternatives?
Raccoon - A high performance offensive security tool for reconnaissance and vulnerability scanning
emoji-regex - A regular expression to match all Emoji-only symbols as per the Unicode Standard.
rtnF - A web-based notetaking app. With WYSIWYG editor, support linking to other notes (wikilink), image paste support, basic formatting, autosave feature.
picomatch - Blazing fast and accurate glob matcher written JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions. Used by GraphQL, Jest, Astro, Snowpack, Storybook, bulma, Serverless, fdir, Netlify, AWS Amplify, Revogrid, rollup, routify, open-wc, imba, ava, docusaurus, fast-glob, globby, chokidar, anymatch, cloudflare/miniflare, pts, and more than 5 million projects! Please follow picomatch's author: https://github.com/jonschlinkert
object-tracking-js - Track an object as it moves in a video with no training
Sketch-Find-And-Replace - Sketch plugin to do a find and replace on text within layers
FDsploit - File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.
wild-wild-path - 🤠 Object property paths with wildcards and regexps 🌵
rengine - reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.
micromatch - Highly optimized wildcard and glob matching library. Faster, drop-in replacement to minimatch and multimatch. Used by square, webpack, babel core, yarn, jest, ract-native, taro, bulma, browser-sync, stylelint, nyc, ava, and many others! Follow micromatch's author: https://github.com/jonschlinkert
social-analyzer - API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites
Mobile-Security-Framework-MobSF - Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.