Discover BishopFox/VulnerableGWTApp Open Source project

Stars
3
Rank 3,943,206 (Top 79 %)
Language
Java
Created 9 months ago
Updated 9 months ago

BishopFox

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

An intentionally-vulnerable GWT-based web application to test tooling and techniques

sliver

Adversary Emulation Framework

8,155

unredacter

Never ever ever use pixelation as a redaction technique

TypeScript

7,687

cloudfox

Automating situational awareness for cloud penetration tests.

1,867

GitGot

Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.

Python

1,412

jsluice

Extract URLs, paths, secrets, and other interesting bits from JavaScript

1,311

eyeballer

Convolutional neural network for analyzing pentest screenshots

Python

1,017

spoofcheck

Simple script that checks a domain for email protections

Python

776

h2csmuggler

HTTP Request Smuggling over HTTP/2 Cleartext (h2c)

Python

632

bfinject

Dylib injection for iOS 11.0 - 11.1.2 with LiberiOS and Electra jailbreaks

Objective-C++

619

GadgetProbe

Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.

Java

578

badPods

A collection of manifests that will create pods with elevated privileges.

Shell

574

iam-vulnerable

Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.

HCL

457

bfdecrypt

Utility to decrypt App Store apps on jailbroken iOS 11.x

439

iSpy

A reverse engineering framework for iOS

Logos

438

rmiscout

RMIScout uses wordlist and bruteforce strategies to enumerate Java RMI functions and exploit RMI parameter unmarshalling vulnerabilities

Java

422

A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.

354

smogcloud

Find cloud assets that no one wants exposed 🔎 ☁️

329

cloudfoxable

Create your own vulnerable by design AWS penetration testing playground

sliver-gui

dufflebag

Search exposed EBS volumes for secrets

274

zigdiggity

A ZigBee hacking toolkit by Bishop Fox

Python

258

deephack

PoC code from DEF CON 25 presentation

Python

240

rickmote

The Rickmote Controller: Hijack TVs using Google Chromecast

Python

220

CVE-2023-3519

RCE exploit for CVE-2023-3519

Python

216

json-interop-vuln-labs

Companion labs to "An Exploration of JSON Interoperability Vulnerabilities"

Python

193

Imperva_gzip_WAF_Bypass

Python

154

pwn-pulse

Exploit for Pulse Connect Secure SSL VPN arbitrary file read vulnerability (CVE-2019-11510)

Shell

136

firecat

Firecat is a penetration testing tool that allows you to punch reverse TCP tunnels out of a compromised network.

126

CVE-2023-27997-check

Safely detect whether a FortiGate SSL VPN instance is vulnerable to CVE-2023-27997 based on response timing

Python

124

asminject

Heavily-modified fork of David Buchanan's dlinject project. Injects arbitrary assembly (or precompiled binary) payloads directly into x86-64, x86, and ARM32 Linux processes without the use of ptrace by accessing /proc/<pid>/mem. Useful for certain post-exploitation scenarios, recovering content from process memory, etc..

Python

112

cve-2024-21762-check

Safely detect whether a FortiGate SSL VPN is vulnerable to CVE-2024-21762

Python

anti-anti-automation

Anti-Anti-Automation Framework

Python

mellon

OSDP attack tool (and the Elvish word for friend)

HTML

forticrack

Decrypt encrypted Fortienet FortiOS firmware images

Python

cyberdic

An auxiliary spellcheck dictionary that corresponds with the Bishop Fox Cybersecurity Style Guide

llm-testing-findings

LLM Testing Findings Templates

HTML

bigip-scanner

Determine the running software version of a remote F5 BIG-IP management interface.

Python

IDontSpeakSSL-deprecated

Simple tool based on sslyze to scan large scope and provide SSL/TLS vulnerabilities

Python

spfmap

A program to map out SPF and DKIM records for a large number of domains

CVE-2021-35211

Python

SpoofcheckSelfTest

Web application that lets you test if your domain is vulnerable to email spoofing

Python

ca-clone

Scripts to clone CA certificates for use in HTTPS client attacks.

Shell

ProxyListReliabilityCheck

Perl script to test the reliability of a list of open web proxies.

Perl

ispy-shell

coldfusion-10-11-xss

Proof of Concept code for CVE-2015-0345 (APSB15-07)

CVE-2022-22274_CVE-2023-0656

Python

awsservicemap

Go module that returns supported regions for a service or supported services for a region

wordlist-sanitizer

Remove Offensive and Profane Words from Wordlists

sliver-overlord

burpcage

Kotlin

guardian-ci

Shell

You-re-Doing-IoT-RNG

Results and device code from the DEF CON 29 presentation "You're Doing IoT RNG"

.github

Bishop Fox Engineering

knownawsaccountslookup

Go module that provides two lookup functions for the data in https://github.com/fwdcloudsec/known_aws_accounts

BishopFox/VulnerableGWTApp

BishopFox

Reviews

Repository Details

More Repositories