ksw9722 Goto Github PK

006961

afl

american fuzzy lop - a security-oriented fuzzer

afl-training

Exercises to learn how to fuzz with American Fuzzy Lop

amass

In-depth Attack Surface Mapping and Asset Discovery

android

Android 加固应用Hook方式-Frida

apiextractor

api 목록 추출 (

awesome-devsecops

An authoritative list of awesome devsecops tools with the help from community experiments and contributions.

awesome-shodan-queries

🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻

bleexam

Android Ble, Central/Peripheral Exam

bloomrpc

GUI Client for GRPC Services

breaking-and-pwning-apps-and-servers-aws-azure-training

Course content, lab setup instructions and documentation of our very popular Breaking and Pwning Apps and Servers on AWS and Azure hands on training!

btlejuice

BtleJuice Bluetooth Smart (LE) Man-in-the-Middle framework

cms

Node.js Content Management System

collaborator-everywhere

A Burp Suite Pro extension which augments your proxy traffic by injecting non-invasive headers designed to reveal backend systems by causing pingbacks to Burp Collaborator

com.ksw.book

crackle

Crack and decrypt BLE encryption

cross-compiled-tools

cve-2021-22204

exiftool arbitrary code execution vulnerability

cve-2021-44228-scanner

Vulnerability scanner and mitigation patch for Log4j2 CVE-2021-44228

cve-2022-44268

A PoC for the CVE-2022-44268 - ImageMagick arbitrary file read

damnvulnerablecryptoapp

An app with really insecure crypto. To be used to see/test/exploit weak cryptographic implementations as well as to learn a little bit more about crypto, without the need to dive deep into the math behind it

dependency-confusion

All About Dependency Confusion Attack, (Detecting, Finding, Mitigating)

dns-mitm

A minimal DNS service that can provide spoofed replies

domclobbering

DOM Clobbering Wiki, Browser Testing, and Payload Generation

dompurify

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

drawio-threatmodeling

Draw.io libraries for threat modeling diagrams

ellipticcurvekeypair

Sign, verify, encrypt and decrypt using the Secure Enclave

example-custom-editor-tab

exploit-cve-2021-22204

Exploit for CVE-2021-22204 (ExifTool) - Arbitrary Code Execution

express-typescript