This repository contains various XXE labs set up for different languages and their different parsers. This may alternatively serve as a playground to teach or test with Vulnerability scanners / WAF rules / Secure Configuration settings.
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
🚨 rdesktop is in need of a new maintainter. Please see the home page for more details. 🚨
A repository to study attack surface of VueJS. Many articles online talked about VueJS vulnerabilities in lengthy and wordly sentences with little example codes. Here, I aim to provide short and simple PoC codes for educational purpose.
Logs is a Burp Suite extension to work with log files.
I keep notes on how port tunneling works, explain the different techniques and specify which scenario to deploy which techniques.
Testing out blogging on Github
Journey to learning frida android.
Detect WFP filters blocking EDR communications
level 1 to 5
Remote Desktop Protocol .NET Console Application for Authenticated Command Execution
Attempts to map various CMD enumerations to powershell version without creating executable process.
Open-Source Phishing Toolkit
Some of the write ups from playing IceCTF that ended on 26 August 2016
After attending an informative session of CTF101 conducted by the NUSGreyhats, these write ups were written during the workshop. Although the solutions were already covered in the workshop, it would good to keep a reference and keep track of what techniques we have learnt today.
learn how to set up SOAP in various language.
Mock ec2 instance metadata service that can run on a developer machine
AWS Cloud Pentest Utility - Helper scripts for a quicker Cloud PT on AWS environments
Targeted vulnerability scanning for burp suite.
CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
Burp extension to help developers replicate findings from pen tests
"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
TP_Link Atheros USB Dongle
A small set of dumb tools for a guy who is learning basics of finance.
A place to dockerize GUI tools
A demo of overriding what's in a person's clipboard