Discover @pwntester Open Source projects

Alvaro Muñoz (@pwntester)

pwntester

Stars
6,319
Global Rank 3,838 (Top 0.2 %)
Followers 1,943
Following 44
Registered over 14 years ago
Most used languages

Java
50.0 %

Lua
11.1 %

C#
5.6 %

Dockerfile
5.6 %

Vim Script
5.6 %

HTML
5.6 %

Python
2.8 %

JavaScript
2.8 %

CodeQL 2.8 %

Shell
2.8 %

XSLT 2.8 %

Go
2.8 %
Location 🇪🇸 Spain
Country Total Rank 52
Country Ranking

CodeQL 1

C#
2

Lua
2

XSLT 6

Java
34

Vim Script
47

Dockerfile
178

Shell
216

HTML
546

Go
720

Python
4,260

JavaScript
6,284

ysoserial.net

Deserialization payload generator for a variety of .NET formatters

octo.nvim

Edit and review GitHub issues and pull requests from the comfort of your favorite editor

cheatsheets

random brain dumps

SerialKillerBypassGadgetCollection

Collection of bypass gadgets to extend and wrap ysoserial payloads

JRE8u20_RCE_Gadget

JRE8u20_RCE_Gadget

DupeKeyInjector

DupeKeyInjector

S2-046-PoC

codeql.nvim

CodeQL plugin for Neovim

codeql_grehack_workshop

GreHack 2021 CodeQL for Java workshop

BlockingServer

Web Server that serves a single file and keeps the connection open until user releases it.

XMLDecoder

RCE Exploit PoC for XMLDecoder

dotnet-deserialization-scanner

.NET Deserialization Passive Scanner

SpringBreaker

Exploit PoC for Spring RCE issue (CVE-2011-2894)

dotfiles

ViewStatePayloadGenerator

ViewState Payload Generator

XStreamServer

RCE Exploit PoC for Spring based RESTFul APIs using XStream as Unmarshaler

nautilus.nvim

A nice and cobaltish neovim theme

JVMDeserialization

PoC for Scala and Groovy

RSA_RESTing

Demos for RSA talk: RESTing on your laurels will get you owned

XStreamPOC

POC for XStream RCE

logging-log4j2

pwntester-blog

OWASP-GoatDroid-Dolphis

OWASP GoatDroid Exploit Apps

cobalt2.vim

Color scheme for vim

hc0n_log4j

OGNLInjection

OGNL Expression Injection Tescase

jdeserialize

Automatically exported from code.google.com/p/jdeserialize

StaticInitializerPayload

RestletXMLDecoder

Restlet API consuming XML serialized Java Objects. Vulnerable to XXE and RCE (if third party libraries like GroovyShell are found in the classpath)

cobange

Neovim color scheme

pwntester.github.io

XQueryInjection

XQuery Injection Testcases

csaw2016_rock

gh-cdr

crane.nvim

test-project

docs

gh-mrva

codeql-cs-template

FortifyHighlighter

Sublime Text Editor Themes for Fortify rulepacks and NSTs