Reverse Shell as a Service

Damn Vulnerable GraphQL Application is an intentionally vulnerable GraphQL service implementation designed for learning about and practising GraphQL Security.

A DNS rebinding attack framework.

Security & License Compliance For Your App's Dependencies 🪱

A very vulnerable web site written in NodeJS with the purpose of have a project with identified vulnerabilities to test the quality of security analyzers tools tools

Vulnerability assessment and penetration testing automation and reporting platform for teams.

Damn Vulnerable Hybrid Mobile App (DVHMA) is an hybrid mobile app (for Android) that intentionally contains vulnerabilities.

My fuzzing corpus

Greenbone Security Assistant - The web frontend for the Greenbone Community Edition

Burp/ZAP/Maven extension that integrate Retire.js repository to find vulnerable Javascript libraries.

Vulnogram is a tool for creating and editing CVE information in CVE JSON format

CVE 2021-21315 PoC

Zed Attack Proxy Scripts for finding CVEs and Secrets.

PoC exploit for CVE-2016-4622

A sandbox escape based on the proof-of-concept (CVE-2018-4087) by Rani Idan (Zimperium)

Some Useful Tricks for Pentest Android and iOS Apps

Phantom eye——A passive business logic vulnerability auditing tool

Extraction of iMessage Data via XSS

A low interaction honeypot for the Cisco ASA component capable of detecting CVE-2018-0101, a DoS and remote code execution vulnerability.

Cumulus is web application weakness monitoring, works with just 3 code lines