jarlob Goto Github PK

bitsarbitraryfilemove

Microsoft Windows BITS Arbitrary File Move Local Privilege Escalation

blogstuff

bluehatil-2020

BlueHatIL 2020 - Staying # and Bringing Covert Injection Tradecraft to .NET

bobby-tables

bobby-tables.com, the site for preventing SQL injections

breaking-and-pwning-apps-and-servers-aws-azure-training

Course content, lab setup instructions and documentation of our very popular Breaking and Pwning Apps and Servers on AWS and Azure hands on training!

browser-pwn

An updated collection of resources targeting browser-exploitation.

btcpayserver

Accept Bitcoin payments. Free, open-source & self-hosted, Bitcoin payment processor.

bugcrowd-talks

Slide Decks and Supporting Content of talks given for Bugcrowd

burpcollaborator

burpdeveltraining

Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"

c1-cms-foundation

C1 CMS Foundation - .NET based, open source and a bundle of joy!

captain-hook

carboncopy

A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux

cefdebug

Minimal code to connect to a CEF debugger.

checkedc

Checked C is an extension to C that adds checking to detect or prevent common programming errors such as buffer overruns and out-of-bounds memory accesses. This repo has a wiki for Checked C, sample code, the specification, and test code.

chrome-token-signing

Chrome and Firefox extension for signing with your eID on the web - READ WIKI!

chromium-ipc-sniffer

A tool to capture communication between Chromium processes on Windows

client-side-prototype-pollution

Prototype Pollution and useful Script Gadgets

cloudgoat

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

codeql

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security (code scanning), LGTM.com, and LGTM Enterprise

codeql-1

GitHub Satellite 2020 workshops on finding security vulnerabilities with CodeQL for Java/JavaScript.

collisions

Hash collisions and their exploitations

comparecoverage

Clang instrumentation module for tracing variable and buffer comparisons in C/C++ and saving the coverage data to .sancov files

conferences

conpresentations

Slide decks from my conference presentations

content-type-research

Content-Type Research

cppast

CppAst is a .NET library providing a C/C++ parser for header files powered by Clang/libclang with access to the full AST, comments and macros

crackingxoroshiro128plus

How to "crack" xoroshiro128+: from two outputs, derive a possible seed

create-react-app

crypton

Library consisting of explanation and implementation of all the existing attacks on various Encryption Systems, Digital Signatures, Key Exchange, Authentication methods along with example challenges from CTFs