JLLeitschuh / security-research

Related projects: ⓘ

• cldrn / codeql-queries
  My CodeQL queries collection
  ☆93Updated last year
• GitHubSecurityLab / CodeQL-Community-Packs
  Collection of community-driven CodeQL query, library and extension packs
  ☆64Updated last month
• j3ssie / codeql-docker
  Ready to use docker image for CodeQL
  ☆88Updated 8 months ago
• securingdev / custom-codeql-queries
  Custom / Experimental CodeQL queries
  ☆37Updated 2 years ago
• JLLeitschuh / lgtm_hack_scripts
  Collection of python helper API's for interacting with LGTM.com in ways the official API doesn't support.
  ☆23Updated 2 years ago
• gagliardetto / codemill
  CodeQL model generation for Go.
  ☆17Updated 3 years ago
• GitHubSecurityLab / gh-mrva
  Run CodeQL queries at scale using Multi-Repository Variant Analysis (MRVA)
  ☆49Updated 5 months ago
• wdahlenburg / spring-gateway-demo
  Sample Spring application to Demonstrate the Gateway Actuator
  ☆48Updated 2 years ago
• advanced-security / gh-codeql-scan
  GH CLI CodeQL Scan Extension
  ☆17Updated this week
• advanced-security / custom-codeql-bundle
  An example repository that demonstrates how the build custom CodeQL bundles that include query customizations through the `Customizations…
  ☆25Updated 2 years ago
• chudyPB / XStream-Gadgets
  Several XStream gadgets ported from ysoserial
  ☆32Updated 2 years ago
• jbaines-r7 / spring4shell_vulnapp
  Intentionally Vulnerable to Spring4Shell
  ☆51Updated 2 years ago
• minamo7sen / burp-JS-Miner
  This tool tries to find interesting stuff inside static files; mainly JavaScript and JSON files.
  ☆54Updated last year
• Metnew / write-ups
  ☆33Updated 2 years ago
• zbazztian / codeql-debug
  ☆69Updated 2 years ago
• usdAG / slipit
  Utility for creating ZipSlip archives
  ☆66Updated last year
• GitHubSecurityLab / gh-qldb
  CodeQL database manager
  ☆44Updated 7 months ago
• STMCyber / RmiTaste
  RmiTaste allows security professionals to detect, enumerate, interact and exploit RMI services by calling remote methods with gadgets fro…
  ☆106Updated 3 years ago
• peterjson31337 / tetctf2021
  tetctf2020_amf_writeups
  ☆23Updated 3 years ago
• SpindleSec / cve-2022-31692
  A project demonstrating an app that is vulnerable to Spring Security authorization bypass CVE-2022-31692
  ☆36Updated last year
• github / codeql-dubbo-workshop
  ☆56Updated last year
• Jarijaas / helsec-1103
  ☆22Updated last year
• Al1ex / CVE-2020-17530
  S2-061 CVE-2020-17530
  ☆29Updated 3 years ago
• detectify / Varnish-H2-Request-Smuggling
  ☆54Updated 3 years ago
• WeiJiLab / Spring4Shell-POC
  Spring4Shell reproduce
  ☆11Updated 2 years ago
• PalindromeLabs / Java-Deserialization-CVEs
  Compiled dataset of Java deserialization CVEs
  ☆60Updated 4 years ago
• spaceraccoon / spring-boot-actuator-h2-rce
  Sample Spring Boot App Demonstrating RCE via Exposed env Actuator and H2 Database
  ☆103Updated 4 years ago
• pimps / gopher-tomcat-deployer
  Gopher Tomcat Deployer
  ☆47Updated 5 years ago
• GrrrDog / Sploits
  Place for random PoCs
  ☆17Updated 4 years ago
• synfron / ReshaperForBurp
  Burp Suite Extension - Trigger actions and reshape HTTP request/response and WebSocket traffic using configurable rules
  ☆91Updated last week