danaepp Goto Github PK

aws-security-workshop

azureworkshop

bc-vaccine-passport-decoder

Research project in the BC Vaccine Passport

bugcrowd_university

Open source education content for the researcher community

bytesindisguise

codeargos

A python module for red teams to support the continuous recon of JavaScript files and HTML script blocks in an active web application.

dotnetcorepluginrepro

A simple project using Nate's DotNetCorePlugin library that is failing to load Azure resource management clients

empire

Empire is a PowerShell and Python post-exploitation agent.

exploitableapp

A .NET core project for web based pen testing

gha-test

gowitness-markdown

A simple script to take all the screenshots from a recon session using gowitness and turning it into a markdown file that you can easily review. #bugbounty #redteam #pentest

kernelforge

A library to develop kernel level Windows payloads for post HVCI era

msp-vendors-vdp-bbp

An index of vendors in the MSP space who have published their Vulnerability Disclosure Program and Bug Bounty Programs.

ngeasyauthsample

Sample Angular app that takes advantage of Azure's EasyAuth authentication tooling.

oscp-notetaking

This repository houses some of the small scripts I had used to quickly document throughout my OSCP course. This was referenced on YouTube, and should be made available to others!

portscanhoneypot

This tool helps #blueteams detect bad actors who may be port scanning the network, and allows #redteams to practice honeypot evasion.

ps4-playground

A set of PS4 experiments using the WebKit exploit

pwncat

Fancy reverse and bind shell handler

pwncat-workshop

Workshop materials for my 'Introduction to pwncat and custom attack modules'

pwncat_dirtypipe

pwncat module that automatically exploits CVE-2022-0847 (dirtypipe)

pwncat_pwnkit

pwncat module that automatically exploits CVE-2021-4034 (pwnkit)

rd-pr

sensitivedatadetector

Sample Burp Suite extension written in Kotlin that accompanies the article at https://danaepp.com/writing-burp-extensions-in-kotlin

spring4shell-poc

Spring4Shell Proof Of Concept/Information CVE-2022-22965

spring4shell-poc-1

Dockerized Spring4Shell (CVE-2022-22965) PoC application and exploit