Aon's Cyber Solutions - Security Testing (Formerly GDS)'s repositories
GWT-Penetration-Testing-Toolset
A set of tools made to assist in penetration testing GWT applications. Additional details about these tools can be found on my OWASP Appsec DC slides available here: http://www.owasp.org/images/7/77/Attacking_Google_Web_Toolkit.ppt
Jetleak-Testing-Script
Script to test if a server is vulnerable to the JetLeak vulnerability
GDS-PMD-Security-Rules
Custom security ruleset for the popular Java static analysis tool PMD.
Whitepapers
A collection of publicly released whitepapers
WCF-Binary-SOAP-Plug-In
This is a Burp Suite plug-in designed to encode and decode WCF Binary Soap request and response data ("Content-Type: application/soap+msbin1). There are two versions of the plug-in available (consult the README for more information).
Anti-CSRF-Library
This library was co-developed with a leading financial institution in order to build a single solution for Cross-Site Request Forgery (CSRF) prevention that is flexible enough to deploy firm-wide within diverse Java/J2EE web application environments.
AntiXSS-for-Java
AntiXSS for Java is a port of the Microsoft Anti-Cross Site Scripting (AntiXSS) v1.5 library for .NET applications. The library requires Java 1.4 or higher, but has no other prerequisites.
sol-function-profiler
Solidity Contract Function Profiler
Code-from-O-reilly-Network-Security-Tools
Tools developed for the book Network Security Tools: Writing, Hacking, and Modifying Security Tools (Published April 2005 by O'Reilly - ISBN 0-596-00794-9). These examples, along with the rest of the examples from the book, are also available from O'Reilly.
JSSE_Fortify_SCA_Rules
Custom Fortify SCA rules to detect common JSSE certification validation flaws
SSLSecurityChecker
IronWASP module to test security of SSL services. Ported from http://www.bolet.org/TestSSLServer/
Presentations
This repository contains slide decks and other materials for talks and research presented at various conferences.
SubstrateDemo
ListLock APK contains the demo APK for the Using Mobile Substrate With Android Applications blog post
Convert2FPR
Utility for converting Findbugs, ESLint and PMD XML results into HP Fortify FPRs
Scala-Findbugs-Sample
Sample Findbugs custom detector for finding potentially insecure Scala code.