Name: Umar Farook
Type: User
Company: Fools Of Security Community
Bio: Security Researcher | Malware RE | DevSecOps | Dev - (C,x86 ASM, Python, NodeJs) | WAF & RASP | Sandbox Dev | LibVMI - Hypervisor Research :)
Location: Bangalore
Blog: http://foolsofsecurity.com/
Umar Farook's Projects
Burp Extender for Orchestron Webhook
OWASP ModSecurity Core Rule Set (CRS) Project (Official Repository)
Python Library for Burp Rest API (https://github.com/vmware/burp-rest-api)
Generate Multiple Nessus Activation Code using Temp Mail Service.
Robot Framework Library for popular Open Source Port Scanner and Vulnerability Scanner, Nmap
Robot Framework Security Automation Script
Reverse-engineering tools and exploits for Samsung's implementation of TrustZone
Samsung Galaxy Note 7 (SM-N930F) N930FXXU2BPI7 Dump
An example and guide to getting started with Jekyll and static site generators.
Tornado Demo Vulnerable Application to test SQL injection vulnerability and patch it using RASP (Runtime Application Self-Protection)
An intentionally vulnerable web application written in Python using Tornado
Testing OS command injection attack on vulnerable application with OWASP CRS && CWAF Ruleset.
Testing Unrestricted File upload vulnerability on xvwa application with OWASP CRS && CWAF Ruleset.
Testing Local File Inclusion (LFI) attack on vulnerable application with OWASP CRS && CWAF Ruleset.
Writing custom WAF rules to prevent web application from new 0-day attacks.
Writing custom rules to fix OWASP CRS 3 and Comodo WAF ruleset
WAF rule to prevent 0-day Vulnerability in Wordpress <= 4.7.4 (Unauthorized Password Reset Vulnerability)
multitenant ModSecurity compatible WAF engine
Webgoat 5.0
Windows Local Privilege Escalation - 0 Day Vulnerability (schtasks.exe) released by @SandboxEscaper :)
A fork of AFL for fuzzing Windows binaries
Windows Installer Bypass using Rollback Script .rbs and .rbf - Race Condition
WP Statistics Plugin < 12.0.8 SQL Injection Vulnerability Analysis