soffensive Goto Github PK

autochrome

This tool downloads, installs, and configures a shiny new copy of Chromium.

awesome-burp-extensions

A curated list of amazingly awesome Burp Extensions

aws-pagination-rules

The rules for pagination in AWS SDKs

azure-docs

Open source documentation of Microsoft Azure

azure-websites-security

Security helpers optimized to run in the Azure App Service environment.

bambdas

Bambdas collection for Burp Suite Professional and Community.

blacklist3r

project-blacklist3r

bruteforce-lists

Some files for bruteforcing certain things.

burp-extensions

Central Repo for Burp extensions

burp-piper

Piper Burp Suite Extender plugin

burp-scripts

burpdeveltraining

Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"

burpssoextension

An extension for BurpSuite that highlights SSO messages in Burp's proxy window..

cartp-cheatsheet

Azure AD cheatsheet for the CARTP course

cheatsheets

Collection of knowledge about information security

cloud-middleware-dataset

cloud-service-enum

cloudmapper

CloudMapper helps you analyze your Amazon Web Services (AWS) environments.

collaborator-everywhere

A Burp Suite Pro extension which augments your proxy traffic by injecting non-invasive headers designed to reveal backend systems by causing pingbacks to Burp Collaborator

cse291-program-synthesis

Program Synthesis Course

cve-2019-17221

PhantomJS uses internal module: webpage, to open, close, render, and perform multiple actions on webpages, which suffers from an arbitrary file read vulnerability. The vulnerability exists in the page.open() function of the webpage module, which loads the specified URL and calls a given callback. When opening a HTML file, an attacker can supply specially crafted file content, which allows reading arbitrary files on the filesystem. The vulnerability is demonstrated by using page.render() as the function callback, resulting in the generation of a PDF or an image of the targeted file.

cve-2019-18935

RCE exploit for a .NET JSON deserialization vulnerability in Telerik UI for ASP.NET AJAX.

cves

A collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for various CVEs.

detectdynamicjs

The DetectDynamicJS Burp Extension provides an additional passive scanner that tries to find differing content in JavaScript files and aid in finding user/session data.

dotfiles-1

Collection of my dotfiles

dtd-finder

List DTDs and generate XXE payloads using those local DTDs.

east

Extensible Azure Security Tool - Documentation

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

gmapsapiscanner

goinsecure-deserialization

Accompanying material needed for the workshop