htrgouvea

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

fuzzing

Tutorials, examples, discussions, research proposals, and other resources related to fuzzing

miasm

Reverse engineering framework in Python

slipstream

NAT Slipstreaming allows an attacker to remotely access any TCP/UDP services bound to a victim machine, bypassing the victim’s NAT/firewall, just by anyone on the victim's network visiting a website

exploits

Pwn stuff.

redteam-research

Collection of PoC and offensive techniques used by the BlackArrow Red Team

subjs

Fetches javascript file from a list of URLS or subdomains.

x-frame-bypass

Web Component extending IFrame to bypass X-Frame-Options: deny/sameorigin

jwt-secrets

surf

Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable SSRF candidates.

domdig

DOM XSS scanner for Single Page Applications

secretz

secretz, minimizing the large attack surface of Travis CI

pd-actions

Continuous recon and vulnerability assessment using Github Actions.

presentations

programs-watcher

A Python script designed to monitor bug bounty programs for any changes and promptly notify users.

TravisLeaks

A tool to find sensitive keys and passwords in Travis logs

firebase

Exploiting misconfigured firebase databases

OSCP-cheat-sheet

Offensive Security Certified Professional ( Preparation documentation )

research

A repo for various research

actions-setup-perl

Setup Perl environment Action

blueteamfieldmanual

This is a digital rendition of the Blue Team Field Manual, which I have used for countless exercises but most importantly Cyber Flag, Cyber Guard, NCX, and NECCDC.

CVE-2019-2725

WebLogic Insecure Deserialization - CVE-2019-2725 payload builder & exploit

OSCP_Review

slides

Slides about HyperDbg

h2csmuggler

codeql-zero-to-hero

CodeQL zero to hero blog post series challenges

perl4noobs

Tutorial de Perl para iniciantes na linguagem.