HoLyVieR

prototype-pollution-nsec18

Content released at NorthSec 2018 for my talk on prototype pollution

RTMFP-JS-Bridge

Bridge to use the RTMFP protocol in JS.

LiveTool

Collaborative editor using Node.JS / Redis / RTMFP / Socket.IO

Hackfest-MiniCTF-2017

tls-attack

CS-Games-2014-CryptoChallenge

Hackfest-MiniCTF

Hackfest-MiniCTF-2018

Hackfest-MiniCTF-2019

http-security-headers

cocaine

A small library for doing (command) lines.

ETSMobile-iOS

fcd

An optimizing decompiler

HotswapAgent

Java unlimited redefinition of classes at runtime.

i18n

Internationalization (i18n) library for Ruby

IEEExtreme-2013-Stats

Java-Deserialization-Cheat-Sheet

The cheat sheet about Java Deserialization vulnerabilities

liferay-portal

nit

Nit language

paperclip

Easy file attachment management for ActiveRecord

phpggc

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

Procurement

Path Of Exile Character & Stash Management Tool

prototype-pollution-jsmtl18

Presentation given at JavaScript Montreal.

Scumblr

Web framework that allows performing periodic syncs of data sources and performing analysis on the identified results

Statozor

tinymce

TinyMCE is a platform independent web based Javascript HTML WYSIWYG editor control released as Open Source under LGPL.

write-ups-2015

Wiki-like CTF write-ups repository, maintained by the community. 2015

write-ups-2016

Wiki-like CTF write-ups repository, maintained by the community. 2016

xcat

Automate XPath injection attacks to retrieve documents

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.