mccabe615 Goto Github PK

aws-metadata-proxy

AWS Metadata Proxy for protection against SSRF

badtf

bootstrap

buby-scripts

Buby scripts

bundler-audit

Patch-level verification for Bundler

burpautoscan

Setup to scan local app with AutoScanWithBurp

burpcheatsheet

A cheat sheet for BurpSuite

burpextensions

Random bunch of Burp extensions

carbonator

Integris Security Carbonator - The Burp Suite Pro extension that automates scope, spider & scan from the command line. Carbonator helps automate the vulnerability scanning of web applications. Either 1 or 100 web applications can be scanned by issuing a single command. Carbonator is now available from within Burp Suite Pro through the BApp Store.

cling

Gem to assist with Rails static analysis

cloud_metadata_ips

List of special metadata IPs used in cloud services

cloudsplaining

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.

codesamples

A sample of vulnerable examples

cookiecatcher

Rack app to catch cookie from XSS

ctf_apps

Vulnerable applications

damn-vulnerable-redis-container

An example of obtaining RCE via Redis and CSRF

dangerousrubyfunctions

List of dangerous Ruby functions

dcaf_case_management

Rails-based case management system for the DC Abortion Fund

django-defectdojo

DefectDojo is an open-source application vulnerability correlation and security orchestration tool.

doctordocker

Docker Doctor - Automated upgrading of libraries through Docker deployments.

domain

Setup script for Regon-ng

dondada

dotfiles-1

Continuous effort - not strength or intelligence - is the key to unlocking our dotfiles.

ebooks.py

Lambda based ebooks Tweeter

g2b2

Golang Gorilla Session Bit Butcher. Brute force Gorilla Sessions

gha-test

haml_xss_example

Copy of Todo app to demo HAML XSS vulnerability

hubot-scripts

optional scripts for hubot, opt in via hubot-scripts.json

hugo

A Fast and Flexible Static Site Generator built with love by spf13 in GoLang

inject-some-sql

Have fun injecting SQL into a Ruby on Rails application!