war-and-code Goto Github PK

akamai-arl-hack

Script to test open Akamai ARL vulnerability.

ato-checklist

A checklist of practices for organizations dealing with account takeover (ATO)

browser-repeater

BurpSuite extension for Repeater tool that renders responses in a real browser.

burp-site-map-to-csv

Burp Suite plugin to export the sitemap to CSV.

burp-soundkit

Burp Suite plugin that plays sound effects when issues are found.

burp-wcf-binary-soap

Burp Suite plugin to encode/decode WCF Binary Soap ("application/soap+msbin1") content.

dp_crypto

Base64-based encryption oracle exploit for CVE-2017-9248 (Telerik UI for ASP.NET AJAX dialog handler)

fiddler-amf-parser

Fiddler plugin to parse AMF (Adobe Message Format) content.

ironwasp

Graphical tool for testing web application security.

jawfish

Tool for breaking into web applications.

kindle-book-ripper

Allows for OCR after capturing screenshots of Kindle book pages.

libreveal.js

Reveals third-party JavaScript libraries in use.

netscaler-cookie-decryptor

Python application to decrypt Netscaler Load Balancer Persistence Cookies

netscaler-xyz

Security toolbox for Citrix NetScaler.

open-anti-bot-box

Vagrantfile with Ubuntu, Varnish, Apache, ModSecurity, and toy web app.

oscp-human-guide

My own OSCP guide

pentest-book

rau_crypto

Hard-coded encryption key remote file upload exploit for CVE-2017-11317, CVE-2017-11357 (Telerik UI for ASP.NET AJAX)

spring-rest-api-security-example

REST service sample that protected by Spring OAuth 2

stitch

Python Remote Administration Tool