blazeinfosec Goto Github PK

activeevent

ActiveEvent is a Burp plugin that integrates Burp Scanner and Splunk events

advisories

Public security advisories released by the consultants of Blaze Information Security

analyze-secheaders

HTTP Security Headers Analyzer

aslrekt

ASLREKT is a proof of concept for an unfixed generic local ASLR bypass in Linux.

bt2

Blaze Telegram Backdoor Toolkit is a post-exploitation tool that leverages the infrastructure of Telegram as a C&C

burpbounty-profiles

Public Burp Bounty profiles

compliance-pentest

Repository for information regarding pentesting for compliance requirements

cve-2017-10366_peoplesoft

CVE-2017-10366: Oracle PeopleSoft 8.54, 8.55, 8.56 Java deserialization exploit

detect-kippo-cowrie

Proof of concept written in Python to detect Kippo and Cowrie SSH honeypots.

flame

Flame - Send vulnerabilities reports to SIEM

nuclei-templates

Nuclei templates written by Blaze Information Security

pcrappyfuzzer

Script to perform quick 'n dirty fuzzing of PCAPs with radamsa and Scapy.

presentations

Public presentations given by the engineers and consultants of Blaze Information Security

public-reports

Reports of public audits performed by Blaze Information Security

resources

ssrf-ntlm

Proof of concept written in Python to show that in some situations a SSRF vulnerability can be used to steal NTLMv1/v2 hashes.

travreg

travreg aids in the discovery of protocol handler-related vulnerabilities.

webshotter

A very simple Python script to take screenshots of websites