Implementation of the DIMVA 2017 publication "Quincy: Detecting Host-Based Code Injection Attacks in Memory Dumps"

USB Rubber Ducky implemented on FeatherS2 boards (e.g. Lolin S2 Pico)

Accurate & Fast BlindSQL Scanner, This tool automatically determines a response time baseline for each target and calculates dynamic thresholds for each payload!

Monitors, Detects, and Blocks SQL Injection and XSS attacks in real time.

The SQL Injection Vulnerability Scanner is a Python tool that identifies SQL injection flaws in web forms using HTTP handling and HTML parsing. It tests forms with SQL payloads and analyzes responses for vulnerabilities, with a simple command-line interface for easy use.

Simple Command Injection Scanner for Web Applications with the intent of automatic testing.

A wide collection of tools for specific exploitations...

DB Exploit using .env Injection

A comprehensive, schema-aware security testing tool for GraphQL endpoints. This tool automatically introspects your GraphQL schema and generates dynamic security tests to identify vulnerabilities.

Strong password generator and Storer for linux

MiTM attack to inject JS code in a public WiFi hotspot, initially to cryptocurrency

Simple web input/cookie/url fuzzer written in python.

Official Implementation of SEAL: A Secure Design Pattern Approach Toward Tackling Lateral-Injection Attacks. The 15th IEEE International Conference on Security of Information and Networks (SIN'22).

Python injection console

Made for a CTF to educate highschoolers on AI Injection attacks. Assisted (greatly) by Claude and Gemini.

HeaderPWN - Python implementation of HTTP Header field injection and testing

Pattern-based forensic detection of NoSQL injection attacks using MongoDB profiler logs with timeline reconstruction and multi-collection analysis.

Standalone FastAPI service providing layer-7 API protection.