Skip to content
@doyensec

Doyensec

Doyensec works at the intersection of software development and offensive engineering. We discover vulnerabilities others cannot, and help mitigate the risk.

Popular repositories Loading

  1. inql inql Public

    InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

    Kotlin 1.8k 188

  2. electronegativity electronegativity Public

    Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron applications.

    JavaScript 1.1k 71

  3. regexploit regexploit Public

    Find regular expressions which are vulnerable to ReDoS (Regular Expression Denial of Service)

    Python 850 58

  4. awesome-electronjs-hacking awesome-electronjs-hacking Public

    A curated list of awesome resources about Electron.js (in)security

    686 66

  5. burpdeveltraining burpdeveltraining Public

    Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"

    Java 358 73

  6. wsrepl wsrepl Public

    WebSocket REPL for pentesters

    Python 238 15

Repositories

Showing 10 of 68 repositories
  • osv-scalibr Public Forked from google/osv-scalibr
    doyensec/osv-scalibr's past year of commit activity
    Go 0 Apache-2.0 211 0 3 Updated Oct 16, 2026
  • tsunami-security-scanner-plugins Public Forked from google/tsunami-security-scanner-plugins

    This project aims to provide a central repository for many useful Tsunami Security Scanner plugins.

    doyensec/tsunami-security-scanner-plugins's past year of commit activity
    Java 0 Apache-2.0 242 0 1 Updated Oct 16, 2026
  • security-testbeds Public Forked from google/security-testbeds
    doyensec/security-testbeds's past year of commit activity
    Tcl 0 Apache-2.0 56 0 0 Updated Oct 16, 2026
  • awesome-electronjs-hacking Public

    A curated list of awesome resources about Electron.js (in)security

    doyensec/awesome-electronjs-hacking's past year of commit activity
    686 66 0 0 Updated Oct 15, 2026
  • inql Public

    InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

    doyensec/inql's past year of commit activity
    Kotlin 1,812 Apache-2.0 188 16 (3 issues need help) 3 Updated Oct 13, 2026
  • tsunami-security-scanner Public Forked from google/tsunami-security-scanner

    Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

    doyensec/tsunami-security-scanner's past year of commit activity
    Java 0 Apache-2.0 957 0 0 Updated Sep 30, 2026
  • maSSO Public

    The malicious IdP you were looking for. A weaponized Single Sign-On (SSO) Identity Provider (IdP) for security testing of OIDC and SAML 2.0 Service Providers, also supporting SCIM protocol.

    doyensec/maSSO's past year of commit activity
    Go 67 Apache-2.0 6 8 (1 issue needs help) 0 Updated Sep 18, 2026
  • ovs-pagecache-write Public

    Unprivileged local root via Open vSwitch stripping SKBFL_SHARED_FRAG from a forwarded skb. Page-cache write through in-place ESP decrypt.

    doyensec/ovs-pagecache-write's past year of commit activity
    C 0 0 0 0 Updated Sep 16, 2026
  • cloudsec-tidbits Public

    Blogpost series showcasing interesting cloud - web app security bugs

    doyensec/cloudsec-tidbits's past year of commit activity
    HCL 77 5 0 0 Updated Jul 20, 2026
  • protospector Public

    Protocol Buffers and gRPC services Burp Extension

    doyensec/protospector's past year of commit activity
    Java 3 Apache-2.0 0 7 0 Updated Jul 8, 2026
View all repositories