irsl Goto Github PK

oleviewdotnet

A .net OLE/COM viewer and inspector to merge functionality of OleView and Test Container

openssh-3.x-challenge-response-buffer-overflow

SSH binary for exploiting OpenSSH 3.x - Challenge-Response Buffer Overflow

p1x1

Open-source web application for cataloging and archiving private photos in S3 compatible stores, protecting content via a full-browser, client-side encryption logic.

pcap-proxy

A simple userland TCP proxy application that captures the network flow into a .pcap file

phar-util

PharUtil - Security-oriented utilities for Phar archives

php-bypass-disable-functions

Demo project how to bypass the disable_functions security control of PHP on Linux

plugp100

Work in progress implementation of tapo protocol in python.

postgres-proxy-cloudsql-iam-vuln

A PoC proxy script that allowed me to extract access tokens from the Postgres wire messages in Google Cloud SQL.

pr-toctou

testing toctou on pr

prejsonparser

proftpd-mysql-password

Support for MySQL PASSWORD() in Proftpd's SQLAuthTypes

protojson-mapper

Tool to reconstruct the proto file used behind protojson based APIs

pubsub-monitor

Simple tool to subscribe to Google Pub/Sub topics and save their events for later analysis.

python-broadlink

Python module for controlling Broadlink RM2/3 (Pro) remote controls, A1 sensor platforms and SP2/3 smartplugs

raiffeisen-direktnet

Transaction parser for the Raiffeisen Direktnet banking website

rdiff-backup

Simple docker image around rdiff-backup

rtsp-simple-server

ready-to-use RTSP / RTMP / LL-HLS / WebRTC server and proxy that allows to read, publish and proxy video and audio streams. Also known as MediaMTX

runner-test

sandbox-attacksurface-analysis-tools

Set of tools to analyze and attack Windows sandboxes.

sandboxed-api

Generate sandboxes for C/C++ libraries automatically

sectigo-test-ca

Just an example certificate issued by Sectigo's test CA

shellinabox

Official-ish Fork of Shell In A Box

smarter-ariston

Hobby project to retrieve the current temperature from an Ariston water heater using an IP camera :)

softhsm-test

A simple docker image to test softhsm2

struts-any-results

Demonstrating why Dynamic Method Invocation with unrestricted method names (the old default of Struts) is dangerous.

syslogd

node syslog server

tcp-http-proxy

A potential solution for OpenWRT + Mitmproxy

test

test

tmpromise

A simple node.js module for storing sensitive data in temp files for a short while.

tplink-tapo-poc

Proof of concept exploits to demonstrate the security issues identified in the Tp-Link Tapo products.