Josh Bery (@codewatchorg)
github

codewatchorg

Twitter logo Share LinkedIn logo Share Facebook logo Share
  • Stars
    star
    1,045
  • Global Rank 29,284 (Top 2 %)
  • Followers 166
  • Registered over 10 years ago
  • Most used languages
    Python
         37.5 %
    Java
         25.0 %
    PowerShell
         18.8 %
    YARA     6.3 %
    Perl
         6.3 %
    C++
         6.3 %

Top repositories

1

bypasswaf

Add headers to all Burp requests to bypass some WAF products
Java
328
star
2

sqlipy

SQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API.
Python
251
star
3

SideStep

Yet another AV evasion tool
C++
118
star
4

cpscam

Bypass captive portals by impersonating inactive users
Perl
75
star
5

Burp-UserAgent

Automatically modify the User-Agent header in all Burp requests
Java
51
star
6

Burp-Yara-Rules

Yara rules to be used with the Burp Yara-Scanner extension
YARA
42
star
7

Burp-AnonymousCloud

Burp extension that performs a passive scan to identify cloud buckets and then test them for publicly accessible vulnerabilities
Java
40
star
8

Burp-IndicatorsOfVulnerability

Burp extension that checks application requests and responses for indicators of vulnerability or targets for attack
Java
39
star
9

PowerSniper

Password spraying script and helper for creating password lists
PowerShell
34
star
10

gophish

GoPhish is a phishing script that enables rapid deployment of phishing sites.
Python
30
star
11

jnlpdownloader

jnlpdownloader is a Python script that takes a URL to a JNLP and downloads all the associated JARs and native libraries. Another Java based tool exists that provides this functionality, but this Python version extends the capabilities to include the ability to authenticate with BASIC, DIGEST, NTLM, or cookie authentication.
Python
13
star
12

OfficeCracker

Tool to bruteforce Word, Excel, and PowerPoint office document passwords
PowerShell
7
star
13

dirscalate

Dirscalate helps escalate a directory traversal vulnerability to root access (hopefully)
Python
6
star
14

nacpersonate

The nacpersonate script uses configuration files to impersonate an OS likely to be allowed through the device without special authentication. The tool spoofs TCP and IP options as well as the User-Agent header sent in requests to appear to be from the selected OS.
Python
4
star
15

droidboxhelper

A slight modification to the droidbox source and a helper file to convert the output into a more legible/readable form.
Python
2
star
16

CloudKeyHunter

Scan targets via SMB for cloud key files on Windows systems
PowerShell
2
star
17

p2e

Process to escalate to, or p2e, identifies processes on remote hosts running under potentially privileged accounts to be used for escalation in penetration tests
1
star