cybersecninjas Goto Github PK

advisories

burpsuitehttpsmuggler

A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques

bypass-web-application-firewalls

Bypassing-Web-Application-Firewalls-And-XSS-Filters A series of python scripts for generating weird character combinations and lists for BurpSuite Pro for bypassing web application firewalls (WAF) and XSS filters. These python scripts have been created to fuzz wierd combinations: URL Escape Characters HTML Escape Characters Binary Characters These scripts were created during an assessment, while trying to bypass a Web Application Firewall (WAF) in order to exploit a XSS vulnerability. Differnt webservers and browsers interpret URL and strange characters differently which could lead to the bypassing of security controls. When I tried to send a > or < character the WAF would block the request. The following URL escapes I have noticed are traslated to < > ' by Apache2 based web servers: %(N%(n%)S%)U%)^%)s%)u%*C%*E%*c%*e%,.%.#%1N%1n%2S%2U%2^%2s%2u%3C%3E%3c%3e%5.%7#%:C%:E %:c%:e%HN%Hn%IS%IU%I^%Is%Iu%JC%JE%Jc%Je%L.%N#%XN%Xn%YS%YU%Y^%Ys%Yu%ZC%ZE%Zc%Ze%.%^# %hN%hn%iS%iU%i^%is%iu%jC%jE%jc%je%l.%n#%xN%xn%yS%yU%y^%ys%yu%zC%zE%zc%ze%|

csharp-and-infosec

This is a monorepo including codes from grey hat c# by no starch and some of my own research with it.

dendrobate

Managed code hooking template.

docker_wokshop_react

fermion

Fermion, an electron wrapper for Frida & Monaco.

flaresolverr

Proxy server to bypass Cloudflare protection

ilspy

.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!

java-todo

A copy starter repo for SQL integration

joomla-3.4.6-rce

Joomla 3.4.6 – Remote Code Execution

libc-database

Build a database of libc offsets to simplify exploitation

paper

Web Security Technology & Vulnerability Analysis Whitepapers

pydebug

A lightweight Python Windows Debugger powered by PyDbg and Paimei

redteam-tactics-and-techniques

Red Teaming Tactics and Techniques

retrowrite

RetroWrite -- Retrofitting compiler passes though binary rewriting

secml_malware

Extension of SecML library, containing adversarial attacks against Windows malware detectors

windows-syscalls

Windows System Call Tables (NT/2000/XP/2003/Vista/2008/7/2012/8/10)

yolo

Nodejs, Express API and MongoDB e-commerce feature project

zipout

Python Zip File Password Cracker