Aon's Cyber Labs

Windows-Exploit-Suggester

This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.

PadBuster

Automated script for performing Padding Oracle attacks

Docker-Secure-Deployment-Guidelines

Deployment checklist for securely deploying Docker

EvilAbigail

Automated Linux evil maid attack

Cexigua

Linux based inter-process code injection without ptrace(2)

xxe-recursive-download

SSH-Weak-DH

D-Modem

A software SIP modem

Nmap-Scripts

Fizzer

Fizzer is an assessment tool for fuzzing FIX messages.

mbedtls-fuzz

BadSamba

This module is used to exploit startup script execution through Windows Group Policy settings when configured to run off of a remote SMB share.

BurpSuite-Team-Extension

This Burpsuite plugin allows for multiple web app testers to share their proxy history with each other in real time. Requests that comes through your Burpsuite instance will be replicated in the history of the other testers and vice-versa!

MAM-Security-Checklist

Checklist intended to be used as a baseline for assessing, designing, and testing the security of a MAM (Application Wrapping) solution

BlazorTrafficProcessor

DUALITY

FastInfoset-Burp-Plugin

Burp plugin to convert fast infoset (FI) to/from the text-based XML document format allowing easy editing

LowDLL

aon-password-research

BurpSuiteTeamServer

This is the Go Server that relays all HTTP requests and responses between clients.

evil-ldap-service

Emulate the evil LDAP service in a vulnerable JNDI lookup