Discover righettod/log4shell-payload-grabber Open Source project

This repository has been archived on 15/Oct/2023
Stars
3
Rank 3,963,521 (Top 79 %)
Language
Java
License
GNU General Publi...
Created almost 3 years ago
Updated almost 3 years ago

righettod

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Tool to try to retrieve the java class used as dropper for the RCE in the context of log4shell vulnerability.

poc-graphql

Research on GraphQL from an AppSec point of view.

Java

404

toolbox-pentest-web

Docker toolbox for pentest of web based application.

Python

121

burp-piper-custom-scripts

Custom scripts for the PIPER Burp extensions.

Python

virtualhost-payload-generator

BURP extension providing a set of values for the HTTP request "Host" header for the "BURP Intruder" in order to abuse virtual host resolution.

Java

log-requests-to-sqlite

BURP extension to record every HTTP request send via BURP and create an audit trail log of an assessment.

Java

pst-digger

Program to analyze mails stored into a Microsoft Outlook PST file and find one based on search keywords.

Java

document-upload-protection

POC in order to protect an document upload application feature against "malicious" document submission.

Java

log4shell-analysis

Contains all my research and content produced regarding the log4shell vulnerability

Java

website-passive-reconnaissance

Script to automate, when possible, the passive reconnaissance performed on a website prior to an assessment.

Python

poc-csrf

POC in order to materialize CSRF prevention concepts described in the following OWASP CSRF cheatsheet

Java

poc-jwt

POC about usage of JSON Web Tokens (JWT) in a secure way.

Java

access-brute-forcer

Android v7+ application to perform a dictionary brute force attack against a host.

Java

tls-cert-discovery

Script to identify new host using the subjectAltName (Subject Alternate Name) extension of a x509 HTTP TLS certificate.

Python

injection-cheat-sheets

Provide some tips to handle Injection into application code (OWASP TOP 10 - A1).

Java

poc-authz-testing

POC in order to explore and describe a proposition for the automation of the testing of the authorization matrix.

Java

powershell-android-utils

PowerShell module providing utility commands to manipulate a APK file on Windows

PowerShell

poc-idor

POC in order to materialize IDOR prevention concepts described in the following OWASP cheatsheet

Java

toolbox-jwt

Docker toolbox with different scripts having for the objective to perform different kinds of attacks against JWT tokens.

Shell

poc-websocket

POC in order to materialize prevention concepts described in the following OWASP WebSocket cheatsheet

Java

robots-disallowed-dict-builder

Script generating a dictionary containing the most common DISALLOW clauses from robots.txt file found on CISCO Top 1 million sites

Python

clipboard-stalker

Android v6+ application to monitor (stalk) the clipboard and grab the content.

Java

ws-probing-shell

Interactive shell in order to probe/analyze a WebSocket endpoint.

Python

external-storage-stalker

Android v6+ application to monitor (stalk) all the external storage locations referenced into the system and list the files that can be accessed in read mode.

Java

poc-argon2

POC in order to materialize prevention concepts described in the following OWASP cheatsheet

Java

poc-argon2-php

POC in order to materialize prevention concepts described in the following OWASP cheatsheet

PHP

poc-error-handling

POC in order to find the right setup to define a global error handler in differents web based technologies

JavaScript

sandbox

Provide network listeners during online training web challenges/labs.

Shell

voxxeddays-lux-2018

Demo project of my talk

Java

pkcheck

Program brute forcing the passphrase of a private key

voxxeddays-lux-2022

Demonstration videos and presentation regarding the talk given at the VOXXED LU 2022 conference.

PHP

righettod/log4shell-payload-grabber

righettod

Reviews

Repository Details

More Repositories