Jacopo

followers

following

stars

San Diego, CA

https://jacopo.cc

Organizations

mechaphish

o-o-overflow

shellphish

Jacopo Corbetta's starred repositories

meltdown

This repository contains several applications, demonstrating the Meltdown bug.

Language:CZlib411100

driller

Driller: augmenting AFL with symbolic execution!

Language:PythonBSD-2-Clause89100

compile-time-regular-expressions

Compile Time Regular Expression in C++

Language:C++Apache-2.0332600

cppinsights

C++ Insights - See your source code with the eyes of a compiler

Language:C++MIT406100

angr

A powerful and user-friendly binary analysis platform!

Language:PythonBSD-2-Clause752800

libcsptr

Smart pointers for the (GNU) C programming language

Language:CMakeMIT157800

explainshell

match command-line arguments to their help text

Language:PythonGPL-3.01318500

rosenbridge

Hardware backdoors in some x86 CPUs

Language:CMIT233400

PuTTYTray

Previously a continuation of Barry Haanstra (haanstra.eu)'s PuTTYTray

Language:CNOASSERTION66000

rtags

A client/server indexer for c/c++/objc[++] with integration for Emacs based on clang.

Language:C++GPL-3.0182800

CSS-Keylogging

Chrome extension and Express server that exploits keylogging abilities of CSS.

Language:CSS321400

fuzzer-test-suite

Set of tests for fuzzing engines

Language:CApache-2.0142700

badssl.com

:lock: Memorable site for testing clients against bad SSL configs.

Language:HTMLApache-2.0283400

honggfuzz

Security oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based)

Language:CApache-2.0305900

avatar2

Python core of avatar²

Language:PythonApache-2.051800

bucket-stream

Find interesting Amazon S3 Buckets by watching certificate transparency logs.

Language:PythonMIT174700

gow

Unix command line utilities installer for Windows.

Language:NSIS657600

ripgrep

ripgrep recursively searches directories for a regex pattern while respecting your gitignore

Language:RustUnlicense4811400

npcap

Nmap Project's Windows packet capture and transmission library

Language:CNOASSERTION299300

afl-unicorn

afl-unicorn lets you fuzz any piece of binary that can be emulated by Unicorn Engine.

Language:CApache-2.059400

deception-as-detection

Deception based detection techniques mapped to the MITRE’s ATT&CK framework

MIT28400

pov_fuzzing

Our backup exploitation technique: fuzzing for POVs!

Language:PythonBSD-2-Clause2500

tracer

Utilities for generating dynamic traces

Language:PythonBSD-2-Clause8800

mecha-docs

Documentation for the Mechanical Phish.

cgrex

Targeted patcher for CGC binaries. CGrex was used only during the CGC qualifier event, and is OBSOLETE. For the CFE, we used patcherex (github.com/shellphish/patcherex).

Language:Python1400

rex

Shellphish's automated exploitation engine, originally created for the Cyber Grand Challenge.

Language:PythonBSD-2-Clause63500

H5SC

HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors

Language:JavaScriptMPL-2.0285100

DOMPurify

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

Language:JavaScriptNOASSERTION1380900

capnproto

Cap'n Proto serialization/RPC system - core tools and C++ library

Language:C++NOASSERTION1160600

pics

File formats dissections and more...

Language:Assembly1048500