nccgroup / RFC-Security-Research
Paper, data and code from Investigating Potential Security Vulnerability Manifestation through Various Analyses & Inferences Regarding Internet RFCs
☆18Updated 4 years ago
Alternatives and similar repositories for RFC-Security-Research:
Users that are interested in RFC-Security-Research are comparing it to the libraries listed below
- Quick WAF "paranoid" Doctor Evaluation | WAFPARAN01D3 Tool☆25Updated 3 years ago
- Tools for auditing WAFS☆18Updated 2 years ago
- Manticore's Public Threats Repository☆10Updated 4 years ago
- The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters☆14Updated 2 years ago
- Burp Suite Pro extension☆10Updated 7 years ago
- A bash script that automates the scanning of a target network for HTTP resources through XXE☆38Updated 4 years ago
- Swiftly search FDNS datasets from Rapid7 Open Data☆21Updated 2 years ago
- A multi-threaded scanner that helps identify CORS flaws/misconfigurations☆19Updated 5 years ago
- Docker container for running OWASP WebGoat.NET application☆11Updated 6 years ago
- An information gathering tool to collect git emails in version control host services☆11Updated 5 years ago
- Publishing advisories for CVEs found by POST Cyberforce☆13Updated 3 weeks ago
- A BurpSuite extension for beautifying .NET message parameters and hiding some of the extra clutter that comes with .NET web apps (i.e. __…☆12Updated 9 years ago
- Supporting material for the "Hunting Bugs In The Tropics" DEFCON 30 talk☆9Updated 2 years ago
- Bug Bounty Clipboard☆17Updated 5 years ago
- Signatures for wraith used to detect secrets across various sources☆15Updated 2 years ago
- String or worldlist encoder for use in fuzzing or web application testing☆18Updated 5 years ago
- ☆28Updated 8 years ago
- Interactsh deployment to AWS EC2 Instance with Terraform☆11Updated 3 years ago
- Jira Secret Hunter - Helps you find credentials and sensitive contents in Jira tickets☆43Updated 2 years ago
- A parallel scanner that utilises axiom to spin up servers and parallel scan using masscan.☆16Updated 4 years ago
- A collection of python apps and shell scripts to email an xlsx spreadsheet of new vulnerabilities in the NIST CVE database and their asso…☆12Updated 4 years ago
- Slides of the talk on Injection attacks in apps with NoSQL Backends, given at null OWASP Bangalore monthly meet on 27th April 2019☆22Updated 5 years ago
- ☆18Updated 7 years ago
- Updated 4 years ago
- #INFILTRATE19 raptor's party pack.☆30Updated last year
- multiple password 'asher using Python’s hashlib☆14Updated 3 years ago
- A simple remote scanner for Liferay Portal☆18Updated last year
- URL-encode data streams via commandline☆14Updated 5 years ago
- Timeinator is an extension for Burp Suite that can be used to perform timing attacks over an unreliable network such as the internet.☆21Updated last year
- An enumeration and exploitation toolkit using RFC calls to SAP☆36Updated 5 years ago