Discover @frohoff Open Source projects

Chris Frohoff (@frohoff)

frohoff

Stars
8,233
Global Rank 2,773 (Top 0.1 %)
Followers 984
Following 13
Registered about 16 years ago
Most used languages

Java
53.1 %

CSS
12.5 %

Ruby
12.5 %

Shell
6.3 %

C
6.3 %

Scala
3.1 %

C++
3.1 %

Perl
3.1 %
Location 🇺🇸 United States
Country Total Rank 1,401
Country Ranking

Java
56

Ruby
1,595

C
2,145

Perl
3,010

CSS
3,050

Scala
3,215

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

jdk8u-jdk

ciphr

CLI crypto swiss-army knife for performing and composing encoding, decoding, encryption, decryption, hashing, and other various cryptographic operations on streams of data from the command line; mostly intended for ad hoc, infosec-related uses.

inspector-gadget

Primitive tool for exploring/querying Java classes via the Tinkerpop Gremlin graph traversal language

grepcidr

from http://www.pc-tools.net/unix/grepcidr/

jdk8u-dev-jdk

jdeserialize

From https://code.google.com/p/jdeserialize/

rails_exploits

serialysis

from http://weblogs.java.net/blog/emcmanus/archive/2007/06/disassembling_s.html

appseccali-java

inyourface

From http://www.synacktiv.com/ressources/inyourface-0.2.tar.gz

pd-buddy-wye

From https://git.clarahobbs.com/pd-buddy/pd-buddy-wye.git

ctfd-trektheme

Star Trek LCARS inspired pure CSS theme for CTFd (v2.1.1) used during the 2019 LayerOne CTF and ToorCon CTF.

appseccali-marshalling-pickles

Slide deck from AppSecCali 2015 Talk "Marshalling Pickles: how deserializing objects will ruin your day"

sleepyhead

imported from https://sourceforge.net/projects/sleepyhead/

grepcidr2

from http://www.taugh.com/grepcidr-2/

burp-plugin-requestutils

Plugin for manipulating requests in PortSwigger Burp Suite Pro v1.5+

jimmix

From http://www.synacktiv.com/ressources/jimmix-0.3.tar.gz

owaspsd-deserialize-my-shorts

Slide deck from OWASP SD Talk "Deserialize My Shorts: Or How I Learned to Start Worrying and Hate Java Object Deserialization"

jdk7u

shellshock-pocs

jmitm2

From http://www.david-guembel.de/uploads/media/jmitm2-0.1.0-source.tar.gz

jdk6

dotfiles

pwdagent

A barebones CLI utility to prompt for and cache a password in memory, then hand it out over HTTP or raw TCP

burp-debug

ircbots

reserializer

privilegedaccessor

From https://code.google.com/p/privilegedaccessor/

frohoff.github.io

Github Pages Site

lambda-zip-test

docker run -v [homedir]/.aws/:/root/.aws/ -e AWS_DEFAULT_PROFILE=[profilename] [containerid]

appseccali-rails-redis

java-suid-exec

Break glass in case of suid java executable.