jgillam Goto Github PK

aws

AWS related scripts.

burp-bs

An extension for Burp Suite which provides integration with the Java BeanShell interpreter.

burp-co2

A collection of enhancements for Portswigger's popular Burp Suite web penetration testing tool.

burp-oauther

based on burp-oauth (https://github.com/dnet/burp-oauth), this version of the tool has a configuration screen and does not require recompiling whenever keys, tokens, secrets are changed.

burp-paramalyzer

Paramalyzer - Burp extension for parameter analysis of large-scale web application penetration tests.

cyber-camp

Repository for Charlotte Infraguard Cybercamp

gitpitch

Markdown Presentations For Everyone on GitHub, GitLab, Bitbucket, GitBucket, Gitea, and Gogs.

gtfobins.github.io

Curated list of Unix binaries that can be exploited to bypass system security restrictions

json-web-tokens

JWT Support for Burp

laudanum2

Web post-exploitation payloads for penetration testing.

loubia

Python script to exploit java unserialize on t3 (Weblogic)

messagereviewer

Python script for generating an HTML viewer for a folder of .msg files.

mobile-security-framework-mobsf

Mobile Security Framework is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing framework capable of performing static analysis, dynamic analysis, malware analysis and web API testing.

ntlm-mimic

A project to generate login forms that mimic a web NTLM prompt.

openflagserver

OpenFlagSever is a simple scoring server intended for use in security CTF (capture the flag) competitions.

openvpn-cfn

Roll your own Amazon Linux 2 OpenVPN with AWS CloudFormation (w/ Dynamically Discovered Latest AMI Id via Parameter Store)

rms-open-letter.github.io

samurai-dojo

Part of the SamuraiWTF project, this is a set of simple vulnerable web apps used primarily for instruction during web penetration testing classes.

serialvulndemo

Serialization vulnerability demos

serphper

Serialized PHP toolkit for Burp Suite

smartthingspublic

SmartThings open-source DeviceTypeHandlers and SmartApps code

wappalyzer

Cross-platform utility that uncovers the technologies used on websites.

wasr

WASR - Web App Security Report, is a template-driven tool for generating security assessment reports. The tool organizes information in a tree-like structure. NOTE: The current iteration of this project serves as an early prototype and is in the process of being re-architected.

wstg

The Web Security Testing Guide is a comprehensive open source guide to testing the security of web applications and web services.