WebHackersWeapons/categorize/langs/JavaScript.md

Tools Made of JavaScript

Type	Name	Description	Star	Tags	Badges
Recon	DotGit	An extension for checking if .git is exposed in visited websites
Recon	rengine	reNgine is an automated reconnaissance framework meant for gathering information during penetration testing of web applications. reNgine has customizable scan engines, which can be used to scan the websites, endpoints, and gather information.
Recon	burp-retire-js
Fuzzer	jwt-cracker	Simple HS256 JWT token brute force cracker		jwt
Scanner	domdig	DOM XSS scanner for Single Page Applications		xss
Scanner	github-search	Tools to perform basic search on GitHub.
Scanner	DOMPurify	DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:		xss
Scanner	PPScan	Client Side Prototype Pollution Scanner
Scanner	jsprime	a javascript static security analysis tool
Scanner	xsinator.com	XS-Leak Browser Test Suite
Exploit	singularity	A DNS rebinding attack framework.
Utils	eval_villain	A Firefox Web Extension to improve the discovery of DOM XSS.		xss
Utils	jsfuck	Write any JavaScript with 6 Characters		xss
Utils	clear-cache	Add-on to clear browser cache with a single click or via the F9 key.
Utils	Edit-This-Cookie	EditThisCookie is the famous Google Chrome/Chromium extension for editing cookies		cookie
Utils	weaponised-XSS-payloads	XSS payloads designed to turn alert(1) into P1		xss documents
Utils	xssor2	XSS'OR - Hack with JavaScript.		xss
Utils	xless	The Serverless Blind XSS App		xss blind-xss
Utils	wssip	Application for capturing, modifying and sending custom WebSocket data from client to server and vice versa.
Utils	PwnFox	Firefox/Burp extension that provide usefull tools for your security audit.
Utils	cookie-quick-manager	An addon to manage (view, search, create, edit, remove, backup, restore) cookies on Firefox.		cookie
Utils	jsonwebtoken.github.io	JWT En/Decode and Verify		jwt
Utils	postMessage-tracker	A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon
Utils	Phoenix	hahwul's online tools		online
Utils	CyberChef	The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
Utils	reverse-shell-generator	Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)		payload
Utils	community-scripts
Utils	quickjack	Quickjack is a point-and-click tool for intuitively producing advanced clickjacking and frame slicing attacks.
Utils	template-generator	A simple variable based template editor using handlebarjs+strapdownjs. The idea is to use variables in markdown based files to easily replace the variables with content. Data is saved temporarily in local storage. PHP is only needed to generate the list of files in the dropdown of templates.