Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
Apereo CAS - Identity & Single Sign On for all earthlings and beyond.
Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.
- doorkeeper
- oauth
- oauth2-provider
- oauth2-server
Malware Configuration And Payload Extraction
🛡️ The missing GraphQL security security layer for Apollo GraphQL and Yoga / Envelop servers 🛡️
Custom apps for the BMW MGU / iDrive 7 head unit (shift lights, virtual dyno, brake and drag timers, G-meter, fault scanner) plus an SDK kit to build and install your own.
- automotive
- bmw
- car-hacking
- head-unit
🔐 Library for developing secure, decentralized, anonymous and quantum-resistant networks in Go language
Automated client-side template injection (sandbox escape/bypass) detection for AngularJS v1.x.
Enable root SSH on BMW MGU head units (iDrive 7 / ID8 BDC3 / ID8 BCP) over ENET - flash the debug image, enroll, persistent SSH with no B7F8E5 DTC, and a unique per-car key.
- developer-mode
- idrive
- idrive7
- root
🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️
Toggle the iPhone call-recording announcement on/off from a Windows GUI, built on the airlift AirTraffic sandbox escape.
- airlift
- airtraffic
- ios
- sandbox-escape
The fastest 128-bit and 256-bit hash, passes all tests, and under 140 source lines of code. API library and CLI tool in C++ and NodeJS/Wasm
A whole bunch of public pentest reports & papers
🪓 High-Speed Log Analysis & Forensics Tool - Part of NullSec Toolkit
Paper vault for passwords and secrets
Code for ASE'21 Paper "CorbFuzz: Checking Browser Security Policies with Fuzzing"
- fuzzing
- concolic-execution
- browser-security
Code for the experiment proposed in Section 4.2 of the paper "The Bouncer Problem: Challenges to Remote Explainability".
Implementation of the packing detection heuristic from the paper "Packed PE File Detection for Malware Forensics" of Han et al.
- binary-analysis
- entropy
- entrypoint
- executable-packing