gdraperi Goto Github PK

burpdeveltraining

Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"

burpjslinkfinder

Burp Extension for a passive scanning JS files for endpoint links.

c2concealer

C2concealer is a command line tool that generates randomized C2 malleable profiles for use in Cobalt Strike.

caldera

The CALDERA automated adversary emulation system

caponeme

Repository demonstrating the Capital One breach on your AWS account

cat-sites

Library of sites for categorization

censys-subdomain-finder

Perform subdomain enumeration using the certificate transparency logs from Censys.

cerberus_research

Research tools for analysing Cerberus banking trojan.

chameleon

PowerShell Script Obfuscator

charlotte

c++ fully undetected shellcode launcher ;)

cheekyblinder

Enumerating and removing kernel callbacks using signed vulnerable drivers

cheesetools

Self-developed tools for Lateral Movement/Code Execution

chimichurri

Some minor changes to Chimichurri to get it to compile on modern machines

chrome_password_grabber

Get unencrypted 'Saved Password' from Google Chrome

cicspwn

CICSpwn is a tool to pentest a CICS Transaction servers on z/OS.

cisco-snmp-rce

Cisco IOS SNMP RCE PoC

clairvoyance

Obtain GraphQL API schema despite disabled introspection!

client-side-prototype-pollution

Prototype Pollution and useful Script Gadgets

cloud-ranges

A list of cloud ranges from different providers.

cloud-security-remediation-guides

Security Remediation Guides

cloud-security-research

Cloud-related research releases from the Rhino Security Labs team.

cloudformation-guard

Guard offers a policy-as-code domain-specific language (DSL) to write rules and validate JSON- and YAML-formatted data such as CloudFormation Templates, K8s configurations, and Terraform JSON plans/configurations against those rules.

cloudgoat

Rhino Security Labs' "Vulnerable by Design" AWS infrastructure setup tool

cloudsplaining

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized HTML report with a triage worksheet.

cmd_and_kubectl_demos

cobaltstrikeparser

cobaltstrikescan

Scan files or process memory for CobaltStrike beacons and parse their configuration

codeql-javascript-unsafe-jquery-plugin

codeql-uboot

coercer

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.