Assetnote

kiterunner

Contextual Content Discovery Tool

wordlists

Automated & Manual Wordlists provided by Assetnote

blind-ssrf-chains

An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability

commonspeak2

Leverages publicly available datasets from Google BigQuery to generate content discovery and subdomain wordlists

nowafpls

Burp Plugin to Bypass WAFs through the insertion of Junk Data

surf

Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable SSRF candidates.

commonspeak2-wordlists

Wordlists that have been compiled using Commonspeak2. This repo is updated every time new wordlists are generated.

batchql

GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations

ghostbuster

Eliminate dangling elastic IPs by performing analysis on your resources within all your AWS accounts.

exploits

Repository to store exploits created by Assetnotes Security Research team

jira-mobile-ssrf-exploit

Exploit code for Jira Mobile Rest Plugin SSRF (CVE-2022-26135)

h2csmuggler

kitebuilder

dbmate

:rocket: A lightweight, framework-agnostic database migration tool.

rules_python

Experimental Bazel Python Rules

squirrel

Fluent SQL generation for golang

cloudflare-go

Go library for the Cloudflare v4 API

crypto

[mirror] Go supplementary cryptography libraries

docker-pgbouncer

Minimal PgBouncer image that is easy to configure

go-logkeycheck

Ensure zap log field names are consistent

pg-repack-docker

Docker image for 'pg_repack' (PostgreSQL extension) to use 'client-side' to run/invoke the actual repack functionality for a PostgreSQL database with the extension installed.