versprite Goto Github PK

alpnpass

This tool will listen on a given port, strip SSL encryption, forward traffic through a plain TCP proxy, then encrypt the returning traffic again and send it to the target of your choice. Unlike most SSL stripping solutions this tool will negotiate ALPN and preserve the negotiated protocol all the way to the target.

bsidessf-2015

Introduction to Reverse Engineering Training

engage

Tools and Materials for the Frida Engage Blog Series

exifphp

A vulnerable application to demonstrate smuggling PHP code through EXIF data

exploit-exercises-arm

I have taken all of the challenges from Protostar - https://exploit-exercises.com/protostar/- and compiled them for the ARM architecture.

flask-json-pickle

Vulnerable Flask Web Application

fork-community

Fork Threat Modeling Platform - Community

helm-charts

devops-ia/helm-charts

liffy

Local File Inclusion Exploitation Tool

notquite0dayfriday

This is a repo which documents real bugs in real software to illustrate trends, learn how to prevent or find them more quickly.

opensoc

pcredz

This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.

profile-builder

Demo application for json-io research

python-stix

A Python library for parsing, manipulating, and generating STIX content.

research

VerSprite Security Research

sleepy-puppy

Blind Cross-site Scripting Collector and Manager

steampipe-mod-aws-compliance

Run individual controls or full compliance benchmarks for CIS, PCI, NIST, HIPAA and more across all of your AWS accounts using Powerpipe and Steampipe.

steampipe-mod-azure-compliance

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS, HIPAA HITRUST, NIST, and more across all of your Azure subscriptions using Powerpipe and Steampipe.

steampipe-mod-gcp-compliance

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS across all of your GCP projects using Powerpipe and Steampipe.

threat-modeling.github.io

tweepy

Twitter for Python!