gagliardetto / codebox
Generate CodeQL taint-tracking models for Go (along with tests) in a graphical UI
☆20Updated last year
Related projects ⓘ
Alternatives and complementary repositories for codebox
- XSS payloads for edge cases☆34Updated 6 years ago
- Full TTY reverse shell over SSH☆57Updated 4 years ago
- ☆33Updated 2 years ago
- ☆34Updated 5 years ago
- Exploiting CVE-2017-7525 demo project with Angular7 frontend and Spring.☆17Updated 5 years ago
- CodeQL model generation for Go.☆17Updated 3 years ago
- Smart DNS Brute Forcer☆22Updated 12 years ago
- Fuzzing script for redirect URL validator☆48Updated 4 years ago
- An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions☆121Updated 6 years ago
- X41 BeanStack - Stack Trace Fingerprinting BETA☆52Updated 4 years ago
- differer finds how URLs are parsed by different languages in order to help bug hunters break filters☆63Updated 4 years ago
- ☆27Updated 4 years ago
- My fuzzing workshop from PHDays9☆27Updated 5 years ago
- YSOSERIAL Integration with burp suite☆40Updated 2 years ago
- Intentionally vulnerable Go web app.☆42Updated 11 months ago
- ☆27Updated 3 years ago
- ☆76Updated 11 years ago
- Collection of python helper API's for interacting with LGTM.com in ways the official API doesn't support.☆23Updated 2 years ago
- Compiled dataset of Java deserialization CVEs☆60Updated 4 years ago
- ☆70Updated 7 years ago
- My solution for GitHub Security Lab CTF 4: CodeQL and Chill - The Java Edition☆19Updated 4 years ago
- Burp Suite extension for JAX-RS☆65Updated 7 years ago
- CVE-2019-9580 - StackStorm: exploiting CORS misconfiguration (null origin) to gain RCE☆32Updated 5 years ago
- 2 web tasks from ZeroNights HackQuest 2016☆51Updated 7 years ago
- A proof of concept that demonstrates asynchronous scanning for Java deserialization bugs☆54Updated 7 years ago
- Burp extension that add a tab to edit Office Open XML document (xlsx,docx,pptx)☆12Updated 6 years ago
- Some exploits to bypass Safer Mode in Ghostscript☆15Updated 4 years ago
- some codeql rules☆13Updated 4 years ago
- My CodeQL queries collection☆95Updated last year
- Another plugin for CRLF vulnerability detection☆26Updated 7 years ago