Discover righettod/website-passive-reconnaissance Open Source project

Stars
31
Rank 820,005 (Top 17 %)
Language
Python
License
GNU General Publi...
Created about 5 years ago
Updated 9 months ago

righettod

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Script to automate, when possible, the passive reconnaissance performed on a website prior to an assessment.

poc-graphql

Research on GraphQL from an AppSec point of view.

Java

404

toolbox-pentest-web

Docker toolbox for pentest of web based application.

Python

121

burp-piper-custom-scripts

Custom scripts for the PIPER Burp extensions.

Python

virtualhost-payload-generator

BURP extension providing a set of values for the HTTP request "Host" header for the "BURP Intruder" in order to abuse virtual host resolution.

Java

log-requests-to-sqlite

BURP extension to record every HTTP request send via BURP and create an audit trail log of an assessment.

Java

pst-digger

Program to analyze mails stored into a Microsoft Outlook PST file and find one based on search keywords.

Java

document-upload-protection

POC in order to protect an document upload application feature against "malicious" document submission.

Java

log4shell-analysis

Contains all my research and content produced regarding the log4shell vulnerability

Java

poc-csrf

POC in order to materialize CSRF prevention concepts described in the following OWASP CSRF cheatsheet

Java

poc-jwt

POC about usage of JSON Web Tokens (JWT) in a secure way.

Java

access-brute-forcer

Android v7+ application to perform a dictionary brute force attack against a host.

Java

tls-cert-discovery

Script to identify new host using the subjectAltName (Subject Alternate Name) extension of a x509 HTTP TLS certificate.

Python

injection-cheat-sheets

Provide some tips to handle Injection into application code (OWASP TOP 10 - A1).

Java

poc-authz-testing

POC in order to explore and describe a proposition for the automation of the testing of the authorization matrix.

Java

powershell-android-utils

PowerShell module providing utility commands to manipulate a APK file on Windows

PowerShell

poc-idor

POC in order to materialize IDOR prevention concepts described in the following OWASP cheatsheet

Java

toolbox-jwt

Docker toolbox with different scripts having for the objective to perform different kinds of attacks against JWT tokens.

Shell

poc-websocket

POC in order to materialize prevention concepts described in the following OWASP WebSocket cheatsheet

Java

robots-disallowed-dict-builder

Script generating a dictionary containing the most common DISALLOW clauses from robots.txt file found on CISCO Top 1 million sites

Python

clipboard-stalker

Android v6+ application to monitor (stalk) the clipboard and grab the content.

Java

ws-probing-shell

Interactive shell in order to probe/analyze a WebSocket endpoint.

Python

log4shell-payload-grabber

Tool to try to retrieve the java class used as dropper for the RCE in the context of log4shell vulnerability.

Java

external-storage-stalker

Android v6+ application to monitor (stalk) all the external storage locations referenced into the system and list the files that can be accessed in read mode.

Java

poc-argon2

POC in order to materialize prevention concepts described in the following OWASP cheatsheet

Java

poc-argon2-php

POC in order to materialize prevention concepts described in the following OWASP cheatsheet

PHP

poc-error-handling

POC in order to find the right setup to define a global error handler in differents web based technologies

JavaScript

sandbox

Provide network listeners during online training web challenges/labs.

Shell

voxxeddays-lux-2018

Demo project of my talk

Java

pkcheck

Program brute forcing the passphrase of a private key

voxxeddays-lux-2022

Demonstration videos and presentation regarding the talk given at the VOXXED LU 2022 conference.

PHP

righettod/website-passive-reconnaissance

righettod

Reviews

Repository Details

More Repositories