brian-scardina

Brian Scardina's starred repositories

Maturity-Models

Node application to help managing Maturity Models like the ones created by BSIMM and OpenSAMM

Language:JavaScriptApache-2.018200

The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

Language:PythonCC-BY-SA-4.01149200

pwndbg

Exploit Development and Reverse Engineering with GDB Made Easy

Language:PythonMIT706900

STAN

STAN is a sTAtic aNalyser

Language:ShellLGPL-3.03900

Burp-Hunter

XSS Hunter Burp Plugin

Language:JavaGPL-3.014900

HUNT

Language:PythonApache-2.0213100

CASC

Language:PythonGPL-2.04300

dwarfexport

Export dwarf debug information from IDA Pro

Language:C++LGPL-2.120400

bincat

Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free detection

Language:OCaml163900

zipkin

Zipkin is a distributed tracing system

Language:JavaApache-2.01686600

evercookie

Produces persistent, respawning "super" cookies in a browser, abusing over a dozen techniques. Its goal is to identify users after they've removed standard cookies and other privacy data such as Flash cookies (LSOs), HTML5 storage, SilverLight storage, and others.

Language:JavaScript441400

Windbg-Scripts

Windbg scripts

1700

Reverse-Engineering-Arsenal

Useful Scripts for helping in reverse engeenering

Language:Python18100

InjectProc

InjectProc - Process Injection Techniques [This project is not maintained anymore]

Language:C++GPL-3.098900

heap-exploitation

This book on heap exploitation is a guide to understanding the internals of glibc's heap and various attacks possible on the heap structure.

Language:C124200

wssip

Application for capturing, modifying and sending custom WebSocket data from client to server and vice versa.

Language:JavaScriptAGPL-3.044500

nimbostratus

Tools for fingerprinting and exploiting Amazon cloud infrastructures

Language:PythonAGPL-3.044300

fuzzbunch

NSA finest tool

Language:Python97200

Airachnid-Burp-Extension

A Burp Extension to test applications for vulnerability to the Web Cache Deception attack

Language:JavaGPL-3.013700

HookCase

Tool for reverse engineering macOS/OS X

Language:C++71600

manticore

Symbolic execution tool

Language:PythonAGPL-3.0366000

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

Language:PHPMIT5596800