Blaze Labs

bt2

Blaze Telegram Backdoor Toolkit is a post-exploitation tool that leverages the infrastructure of Telegram as a C&C

pcrappyfuzzer

Script to perform quick 'n dirty fuzzing of PCAPs with radamsa and Scapy.

ssrf-ntlm

Proof of concept written in Python to show that in some situations a SSRF vulnerability can be used to steal NTLMv1/v2 hashes.

CVE-2017-10366_peoplesoft

CVE-2017-10366: Oracle PeopleSoft 8.54, 8.55, 8.56 Java deserialization exploit

aslrekt

ASLREKT is a proof of concept for an unfixed generic local ASLR bypass in Linux.

webshotter

A very simple Python script to take screenshots of websites

Flame

Flame - Send vulnerabilities reports to SIEM

detect-kippo-cowrie

Proof of concept written in Python to detect Kippo and Cowrie SSH honeypots.

nuclei-templates

Nuclei templates written by Blaze Information Security

public-reports

Reports of public audits performed by Blaze Information Security

advisories

Public security advisories released by the consultants of Blaze Information Security

burpbounty-profiles

Public Burp Bounty profiles

ActiveEvent

ActiveEvent is a Burp plugin that integrates Burp Scanner and Splunk events

analyze-secheaders

HTTP Security Headers Analyzer

compliance-pentest

Repository for information regarding pentesting for compliance requirements

presentations

Public presentations given by the engineers and consultants of Blaze Information Security

resources

travreg

travreg aids in the discovery of protocol handler-related vulnerabilities.