alexlauerman Goto Github PK

android-insecurebankv2

Vulnerable Android application for developers and security enthusiasts to learn about Android insecurities

androidsourcescout

Android Security Static Analysis Tool for Android Studio

begin-personal-website

Begin app

breachoftrust

A tool for exploiting BREACH and TIME attacks on SSL

brewski

browsersec

Automatically exported from code.google.com/p/browsersec

burp-non-http-extension

Non-HTTP Protocol Extension (NoPE) Proxy and DNS for Burp Suite.

burp-suite-software-version-checks

Burp extension to passively scan for applications revealing software version numbers

burpextensions

A list of burp extensions, although this has fallen very out of date.

community-scripts

A collection of ZAP scripts provided by the community - pull requests very welcome!

emptyburpextension

Example Burp extension to help get IntelliJ IDEA setup for Burp extension development

frankencert

Frankencert - Adversarial Testing of Certificate Validation in SSL/TLS Implementations

fridump

A universal memory dumper using Frida

fuzz.txt

Potentially dangerous files

gittools

A repository with 3 tools for pwn'ing websites with .git repositories available

hacking-the-a-tag-in-100-characters

Hacking the <a> tag in 100 characters

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

home-assistant.io

:blue_book: Home Assistant User documentation

iis-shortname-scanner

latest version of scanners for IIS short filename (8.3) disclosure vulnerability

incrementmeplease

Burp extension to increment a parameter in each active scan request

kc-infosec

KC Infosec

lair

Lair is a reactive attack collaboration framework and web application built with meteor.

lair-browser-scripts

Collection of small JavaScript functions and scripts that can be used in the browser to interact with Lair

microsoft-27mhz-keyboard-decoder

Uses Python and GNURadio to decode keystrokes of Microsoft a 27mhz keyboard

mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

ms10-070checkpatch

Check for .net padding oracle patch

oxml_xxe

A tool for embedding XXE/XML exploits into different filetypes

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

phishery

An SSL Enabled Basic Auth Credential Harvester with a Word Document Template URL Injector

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups