orangetw Goto Github PK

activescan3plus

Modified version of ActiveScan++ Burp Suite extension

aniarc-skype-bot

Simple Python (Py4Skype) Bot, Pushing Github, BitBucket, Errbit, Capistrano HTTP Post to Skype Chat Channel

asset-pipeline

The core implementation of the asset pipeline for the jvm

awesome-jenkins-rce-2019

There is no pre-auth RCE in Jenkins since May 2017, but this is the one!

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

burp-exceptions

Simple trick to increase readability of exceptions raised by Burp extensions written in Python

cookitor-site

A site to easily decode the content of Rails sessions stored in cookies.

ctf-writeup

Just another stupid logs

curl

Curl is a tool and libcurl is a library for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, GOPHER, TFTP, SCP, SFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMAP, SMTP, POP3, RTSP and RTMP. libcurl offers a myriad of powerful features

de4dot

.NET deobfuscator and unpacker.

gatekeeper

GATEKEEPER: Inline and on-target defense

gdbinit

Gdbinit for OS X, iOS and others - x86, x86_64 and ARM

hitcon2013-wargame.github.com

wargame.hitcon.org

how2heap

A repository for learning various heap exploitation techniques.

j2eescan

J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

jndi-injection-bypass

Some payloads of JNDI Injection in JDK 1.8.0_191+

micro8

modsecurity

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis. With over 10,000 deployments world-wide, ModSecurity is the most widely deployed WAF in existence.

my-ctf-web-challenges

Collection of CTF Web challenges I made

my-presentation-slides

Collections of Orange Tsai's public presentation slides.

network-emulator

LD_PRELOAD POSIX network API emulator

pathod

A pathological HTTP daemon

pentest_study

pysslshells

Finally, reverse/bind shells written in python, encrypted with ssl!

python-websocket-server

A simple fully working websocket-server in Python with no external dependencies

responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

s2-046-poc

S2-046-PoC

scapy

Scapy: the Python-based interactive packet manipulation program & library. Supports Python 2 & Python 3.

sinatra

Classy web-development dressed in a DSL (official / canonical repo)