Explore @RUB-NDS Open Source projects

Ruhr University Bochum - Chair for Network and Data Security (@RUB-NDS)

RUB-NDS

Stars
6,591
Global Org. Rank 3,436 (Top 2 %)
Registered about 9 years ago
Most used languages

Java
49.2 %

Python
15.4 %

JavaScript
7.7 %

HTML
6.2 %

C++
6.2 %

CoffeeScript
4.6 %

PHP
3.1 %

TeX
3.1 %

C#
1.5 %

Go
1.5 %

C
1.5 %
Location 🇩🇪 Germany
Country Total Rank 270
Country Ranking

Python
43

Go
111

Java
148

TeX
197

CoffeeScript
200

PHP
403

C
668

HTML
902

C++
1,077

JavaScript
1,499

C#
4,154

PRET

Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.

Terrapin-Scanner

This repository contains a simple vulnerability scanner for the Terrapin attack present in the paper "Terrapin Attack: Breaking SSH Channel Integrity By Sequence Number Manipulation".

WS-Attacker

WS-Attacker is a modular framework for web services penetration testing. It is developed by the Chair of Network and Data Security, Ruhr University Bochum (https://nds.rub.de/ ) and the Hackmanit GmbH (https://www.hackmanit.de/).

CORStest

A simple CORS misconfiguration scanner

Metadata-Attacker

A tool to generate media files with malicious metadata

BurpSSOExtension

An extension for BurpSuite that highlights SSO messages in Burp's proxy window..

PDF101

Artifacts for the Black Hat talk.

REST-Attacker

REST-Attacker is designed as a proof-of-concept for the feasibility of testing generic real-world REST implementations. Its goal is to provide a framework for REST security research.

xsinator.com

XS-Leak Browser Test Suite

alpaca-code

Artifacts to the ALPACA attack.

Johnny-You-Are-Fired

Artifacts for the USENIX publication.

DTD-Attacks

Tests for different parsers from Ruby, Python, .NET, PHP, Perl, Java

MS-RMS-Attacks

Breaking the security of Microsoft's RMS

Terrapin-Artifacts

This repository contains the artifacts for the paper "Terrapin Attack: Breaking SSH Channel Integrity By Sequence Number Manipulation".

JOSEPH

OpenID-Attacker

PrOfESSOS

PrOfESSOS is our open source implementation for fully automated Evaluation-as-a-Service for SSO. PrOfESSOS introduces a generic approach to improve the security of OpenID Connect implementations by systematically detecting vulnerabilities.

SAML-XXE-Test

Simple XXE test suite generated specifically for SAML interfaces

pdf-attacker

thesis_layout

Latex template for students writing a bachelor or master thesis

ikev1-psk-main-mode-dict-attacker

Proof-of-Concept Dictionary Attacker against IKEv1 PSK in Main Mode

SocketProxy

Simple proxy designed to intercept and modify connections on the transport level. This means you can also modify TLS raw bytes.

Office-Security

Artifacts for the WOOT publication.

FutureTrust

FutureTrust analyzes electronic identification (eID) services in Europe and beyond. It is funded within the EU Framework Programme for Research and Innovation (Horizon 2020).

DISTINCT

Dynamic In-Browser Single Sign-On Tracer Inspecting Novel Communication Techniques

OOXML_Signature_Security

USENIX 2023 Artifacts

AutoLeak

Find XS-Leaks in the browser by diffing DOM-Graphs in two states

your-sop.com

SOAP-Test-Webservices

SOAP webservices of different SOAP frameworks including samples for WS-Security.

exposee_layout

Latex template for students writing an exposé for a seminar or thesis

Covert-Content-Attacks

Artifacts for the DEF CON talk.

WS-TLS-Scanner

The TLS-Scanner for the SIWECOS Project

CVE-2020-2655-DemoServer

SECRET

A Secure, Efﬁcient, and Collaborative Real-Time Web Editor

Gridcoin-Attacks

The source code of our attacking tool described in the paper "Breaking and Fixing Gridcoin" published at WOOT'17, see also:

JavaCryptoExamples

Examples for using Java Crypto

Terrapin-Website

This repository hosts the public website for the paper "Terrapin Attack: Breaking SSH Channel Integrity By Sequence Number Manipulation" via GitHub Pages.

RKE

Implementation of ratcheted key exchange protocol (Poettering and Rösler, CRYPTO 2018, https://ia.cr/2018/296) by Marco Smeets

WS-Attacker-Plugin_Denial_of_Service

Denial_of_Service - A git submodule for WS-Attacker

SyncEnc-Keyserver

A Key Management Server for SyncEnc

WS-Attacker-Library_Intelligent_Denial_of_Service_Library

Intelligent_Denial_of_Service_Library - A git submodule for WS-Attacker

PDF-Tester

PDF Tester can be used to evaluate the signature status of a PDF document under different PDF applications.

JsseTLS

BouncyCastleTLS

BouncyCastle TLS examples

WS-Attacker-Library_Signature_Faking_Library

Signature_Faking_Library - A git submodule for WS-Attacker

alpaca-attack

AKE-Cryptoverif-Tutorial

Mitigation-of-Attacks-on-Email-E2E-Encryption

Research Artifacts for the Publication "Mitigation of Attacks on Email End-to-End Encryption"

IPsec-StateMachineExtractor

Extract the state machine of an IKEv1/IKEv2 implementation

SyncEnc-App

WS-Attacker-Library_XML_Encryption_Attack_Library

XML_Encryption_Attack_Library - A git submodule for WS-Attacker

Single-Sign-On-Libraries

ShareJSXML

Library to allow concurrent editing of XML documents using Operational Transforms based on ShareJS 0.6

SyncEnc-Demonstrator

A Demonstrator for Collaborative Encrypted Editing

WS-Attacker-Plugin_SoapAction_Spoofing

SoapAction_Spoofing - A git submodule for WS-Attacker

WS-Attacker-Plugin_Signature_Wrapping

Signature_Wrapping - A git submodule for WS-Attacker

WS-Attacker-Plugin_XML_Encryption_Attack

XML_Encryption_Attack - A git submodule for WS-Attacker

WS-Attacker-Plugin_Intelligent_Denial_of_Service

Intelligent_Denial_of_Service - A git submodule for WS-Attacker

XMLSec-WebCrypto

An implementation for the XML Security Standard using the W3C WebCrypto API

oidc-docker-libs

medfuzz

Fuzzing plattform for medical protocols

DocumentSignatureValidator

Automation tool for evaluating the signature status of office documents

WS-Attacker-Library_SoapHttpClient

SoapHttpClient - A git submodule for WS-Attacker

WS-Attacker-Library_Signature_Wrapping

Signature_Wrapping_Library - A git submodule for WS-Attacker

WS-Attacker-Plugin_WS_Addressing_Spoofing

WS_Addressing_Spoofing - A git submodule for WS-Attacker

WS-Attacker-Library_XML_Utilities

WS-Attacker-Library_XML-Utilities- A git submodule for WS-Attacker

WS-Attacker-Plugin_OptionsTesterPlugin

OptionsTesterPlugin - A git submodule for WS-Attacker

WS-Attacker-Library_Schema_Analyzer

Schema_Analyzer_Library - A git submodule for WS-Attacker