on-device-browser-agent

Local Browser - On-Device AI Web Automation Launching support for runanywhere-web-sdk soon in our main repo: please go check it out: https://github.com/RunanywhereAI/runanywhere-sdks A Chrome extension that uses WebLLM to run AI-powered web automation entirely on-device. No cloud APIs, no API key...

save-telegram-chat-history

Save Telegram Chat History Why this extension? Perhaps, many of us like Telegram messenger and use it for conversations with friends. However, we were a bit disappointed by the absence of any sort of easy-accessible "Save Conversation" feature in the messenger. Therefore, we've written a Chrome...

xsser

XSSER Presentation From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 Demo Version 2.0 - 2015: https://www.youtube.com/playlist?list=PLIjb28IYMQgqqqApoGRCZO40vP-eKsgf Version 2.5 - 2016: https://www.youtube.com/playlist?list=PLRic6PgcrsWGkgacL6WFnSQKVRZIoofRj Version 2.75 - 2017: None Currently...

cromos

Cromos Cromos is a tool for downloading legitimate extensions of the Chrome Web Store and inject codes in the background of the application and more cromos create executable files to force installation via PowerShell for example, and also upload files to dropbox to host the malicious files...

whatsfoto

WhatsFoto Simple tool to download multiple profile pictures from whatsapp. Its an extensions for Chrome Install Download the zip or folder and drag it into your extension. Make sure you enable developer mode. Or use a zip file. Howto Login to web.whatsapp.com Click on the icon, enter phone number...

chlonium

Chlonium Chlonium is an application designed for cloning Chromium Cookies. From Chromium 80 and upwards, cookies are encrypted using AES-256 GCM, with a state key which is stored in the Local State file. This state key is encrypted using DPAPI. This is a change from older versions, which used DPA...

ssct

ShadowSocks ConnecTion A wrapper tool for shadowsocks to consistently bypass firewalls. Quick start Automatically connect The easiest way to run this tool is just type ssct in terminal, and ssct will acquire available shadowsocks servers from ishadowsocks and connect to it automatically. Connect ...

CVE-2024-4761

CVE-2024-4761 Exploit de haute sévérité CVE-2024-4761 Google a publié des mises à jour de sécurité urgentes pour corriger une vulnérabilité zero-day de haute sévérité, suivie sous le nom CVE-2024-4761, dans le navigateur Chrome. La vulnérabilité est un problème d'écriture hors limites qui réside...

paskto

Paskto - Passive Web Scanner Paskto will passively scan the web using the Common Crawl internet index either by downloading the indexes on request or parsing data from your local system. URLs are then processed through Nikto and known URL lists to identify interesting content. Hash signatures are...

PenScope

root@kitploit: ██████╗ ███████╗███╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ███████╗ ██╔══██╗██╔════╝████╗ ██║██╔════╝██╔════╝██╔═══██╗██╔══██╗██╔════╝ ██████╔╝█████╗ ██╔██╗ ██║███████╗██║ ██║ ██║██████╔╝█████╗ ██╔═══╝ ██╔══╝ ██║╚██╗██║╚════██║██║ ██║ ██║██╔═══╝ ██╔══╝ ██║ ███████╗██║...

should-i-trust

should-i-trust Summary should-i-trust is a tool to evaluate OSINT signals for a domain. Requirements should-i-trust requires API keys from the following sources: Censys.io - Free for for first 250/quries/month VirusTotal - Free GrayHatWarFare - Free with limited results Use Case You're part of a...

CVE-2021-21193

CVE-2021-21193 Введение в хакинг Презентации тематических исследований уязвимостей Март 2022 Мехрзад Ходашенас, Сетарех Шейхолесламзадех Введение Краткая информация Запись в словаре CVE: CVE-2021-21193 Дата публикации NVD: 16.03.2021 Дата последнего изменения NVD: 12.03.2021 Источник: Chrome...

Instagram-Crawler

Instagram-Crawler Non API. Crawling post photo, likes, comments, date ... by username, hashtags Installation 1. Make sure you have Chrome browser installed. 2. Download chromedriver and put it into driver folder: ./driver/chromedriver 3. Install requirements pip install -r requirements.txt...

GHunt

🌐 GHunt Online version : https://osint.industries 🐍 Now Python 3.13 compatible ! 😊 Description GHunt v2 is an offensive Google framework, designed to evolve efficiently. It's currently focused on OSINT, but any use related with Google is possible. Features : CLI usage and modules Python library...

evilqr

Evil QR Toolkit demonstrating another approach of a QRLJacking attack, allowing to perform remote account takeover, through sign-in QR code phishing. It consists of a browser extension used by the attacker to extract the sign-in QR code and a server application, which retrieves the sign-in QR cod...

exploit_mitigations

Exploitation Mitigations The goal is to list exploitation mitigations added over time in various operating systems, software, libraries or hardware. It becomes handy to know if a given vulnerability is easily exploitable or not depending on exploitation mitigations in place. An example is the...

boringssl

BoringSSL BoringSSL — это форк OpenSSL, созданный для удовлетворения потребностей Google. Хотя BoringSSL является проектом с открытым исходным кодом, он не предназначен для общего использования, в отличие от OpenSSL. Мы не рекомендуем сторонним проектам полагаться на него. Это, скорее всего,...

apfell-chrome-extension-c2server

apfell-chrome-extension-c2server C2-сервер Apfell для полезной нагрузки расширения Google Chrome Последнюю версию C2-сервера расширения Chrome в фреймворке Apfell можно найти здесь: https://github.com/its-a-feature/Apfell...

CVE-2023-4357

【CVE-2023-4357】Chrome-XXE 任意文件读取漏洞复现 ВОСПРОИЗВЕДЕНИЕ Используйте файлы, показанные выше, или перейдите по адресу http://188.68.220.248/js.svg...

debugHunter

debugHunter Discover Hidden Debug Endpoints & Development Environments The essential Chrome extension for bug bounty hunters and penetration testers Passively detect debug parameters, sensitive headers, and exposed paths while you browse. Why debugHunter? Finding debug endpoints and exposed...