jarlob Goto Github PK

oauthsecurity

OAuth Security Cheatsheet

objection

📱 objection - runtime mobile exploration

octopus

Security Analysis tool for WebAssembly module (wasm) and Blockchain Smart Contracts (BTC/ETH/NEO/EOS)

oleviewdotnet

A .net OLE/COM viewer and inspector to merge functionality of OleView and Test Container

online-tools

Online tools provides md2, md5, sha1, sha2, sha512, bas64, html encode / decode functions

optee_fuzzer

This repository contains the code for a fuzzing prototype for the OP-TEE system call interface using AFL.

orchard

Orchard is a free, open source, community-focused Content Management System built on the ASP.NET MVC platform.

orchardcore

Orchard Core is an open-source modular and multi-tenant application framework built with ASP.NET Core, and a content management system (CMS) built on top of that framework.

oss-fuzz-fork

OSS-Fuzz - continuous fuzzing for open source software.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pdbex

pdbex is a utility for reconstructing structures and unions from the PDB into compilable C headers

penet

Portable Executable (PE) library written in .Net

php-vulnerability-audit-cheatsheet

This will assist you in the finding of potentially vulnerable PHP code. Each type of grep command is categorized in the type of vulnerabilities you generally find with that function.

phpggc

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

phuip-fpizdam

Exploit for CVE-2019-11043

piranha.core

Piranha CMS is the friendly editor-focused CMS for .NET Core that can be used both as an integrated CMS or as a headless API.

poc

Proof of Concepts

poc-graphql

Research on GraphQL from an AppSec point of view.

pocsubjectinterfacepackage

A proof-of-concept subject interface package (SIP) used to demonstrate digital signature subversion attacks.

polarbearrepo

postmessage-tracker

A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon

powershell-suite

My musings with PowerShell

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

ppscan

Client Side Prototype Pollution Scanner

prangster

Black-Box Assessment of Pseudorandom Algorithms

presentation

presentations

A repository of my presentations

presentations-1

Collection of my slide decks

privesccheck

Privilege Escalation Enumeration Script for Windows

psinject

Inject PowerShell into any process