nickstadb Goto Github PK

aws-security-cert-service-notes

Security aspects of AWS products for the Security Specialist certification

barmie

Java RMI enumeration and attack tool.

cacheplz

Burp Suite extension to fix caching of large static resources returned by badly configured servers/apps.

deserlab

Java deserialization exploitation lab.

freddy

Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans

frida-mono-api

All the mono c exports, ready to be used in frida!

fuzzdb

Automatically exported from code.google.com/p/fuzzdb

gadgetinspector

A byte code analyzer for finding deserialization gadget chains in Java applications

lynis

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

metasploit-framework

Metasploit Framework

metofficemountainweathernotifier-android

Android app that generates daily Met Office mountain weather forecast notifications.

middleware-vulnerability-detection

CVE、CMS、中间件漏洞检测利用合集 Since 2019-9-15

mobileappvm

VM build script for mobile app pentesting/reversing.

nickstadb.github.io

objection

📱 objection - runtime mobile exploration

patch-apk

Wrapper to inject an Objection/Frida gadget into an APK, with support for app bundles/split APKs.

pathbrute

Pathbrute

phpggc

phpseclib

PHP Secure Communications Library

poc

Repo for proof of concept exploits and tools.

reflections

Automatically exported from code.google.com/p/reflections

rmiscout

RMIScout uses wordlist and bruteforce strategies to enumerate Java RMI functions and exploit RMI parameter unmarshalling vulnerabilities

serialbrute

Java serialization brute force attack tool.

serializationdumper

A tool to dump Java serialization streams in a more human readable form.

signapk

Automatically exported from code.google.com/p/signapk

top10webseclist

Top Ten Web Hacking Techniques List

xamarin-decompress

Decompress Xamarin .NET compressed binaries so they can be decompiled.

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

zeropress

A dumb script for finding dumb coding errors in WordPress plugins