dub-flow Goto Github PK

basic-aws-enumeration

This repo contains useful commands for enumerating common AWS services

createobjecturl-xss-poc

PoC for how createObjectURL() can be vulnerable to XSS

dub-flow

github-dorks

The repository contains useful GitHub dorks for finding open-source vulnerabilities.

java-gadget-chain

This project contains a Java deserialization vulnerability that is exploitable with some ysoserial payloads, but also contains a custom class that can be leveraged to get command execution upon deserialization.

jni-shared-object-injection-poc

This repo contains a PoC for how an attacker might be able to inject a malicious shared object into a Java application using JNI.

path-normalization-bypasses

This repo contains labs for bypassing path normalization issues involving Nginx and e.g. Flask and Node.js

pirate-vuln-app

A repository containing a very simple pirate-themed vulnerable app

random-bruteforce

This repo is a practical demonstration of bruteforcing a number generated by a not cryptographically secure random number generator

secure-code-review-challenges

This repo contains the code for my secure code review challenges

secure-processing-xxe-tests-java

This repository show that the FEATURE_SECURE_PROCESSING functionality doesn't provide any security benefit against XXE in Java

sessionprobe

SessionProbe is a multi-threaded tool designed for penetration testing and bug bounty hunting. It evaluates user privileges in web applications by taking a session token and checking access across a list of URLs, highlighting potential authorization issues.

subsnipe

SubSnipe is a tool designed to help find subdomains that are vulnerable to takeover.

veracode-javascript-packager

Simple auto-packager for JavaScript/TypeScript (i.e., Node, Angular, React, Vue) that creates a zip to upload for Veracode Static Analysis

vulnerability-research

This repository contains information on the CVEs I found.

xssprobe

XSSProbe is a multi-threaded pentesting tool designed to assist in finding Cross-Site Scripting vulnerabilities.