assetnote Goto Github PK

batchql

GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations

blind-ssrf-chains

An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability

cloudflare-go

Go library for the Cloudflare v4 API

commonspeak2

Leverages publicly available datasets from Google BigQuery to generate content discovery and subdomain wordlists

commonspeak2-wordlists

Wordlists that have been compiled using Commonspeak2. This repo is updated every time new wordlists are generated.

crypto

[mirror] Go supplementary cryptography libraries

dbmate

:rocket: A lightweight, framework-agnostic database migration tool.

docker-pgbouncer

Minimal PgBouncer image that is easy to configure

exploits

Repository to store exploits created by Assetnotes Security Research team

ghostbuster

Eliminate dangling elastic IPs by performing analysis on your resources within all your AWS accounts.

go-logkeycheck

Ensure zap log field names are consistent

h2csmuggler

jira-mobile-ssrf-exploit

Exploit code for Jira Mobile Rest Plugin SSRF (CVE-2022-26135)

kitebuilder

kiterunner

Contextual Content Discovery Tool

nowafpls

Burp Plugin to Bypass WAFs through the insertion of Junk Data

pg-repack-docker

Docker image for 'pg_repack' (PostgreSQL extension) to use 'client-side' to run/invoke the actual repack functionality for a PostgreSQL database with the extension installed.

rules_python

Experimental Bazel Python Rules

squirrel

Fluent SQL generation for golang

surf

Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable SSRF candidates.

wordlists

Automated & Manual Wordlists provided by Assetnote