juliocesarfort

public-pentesting-reports

A list of public penetration test reports published by several consulting firms and academic security groups.

netscreen-shodan-scanner

A SHODAN/Censys + Paramiko scanner to check for backdoored Internet-facing Juniper ScreenOS devices

nukemyluks

Nuke My LUKS is a network panic button designed to overwrite with random data the LUKS header of computers in a LAN.

webshotter

A multi-threaded Python tool to generate screenshot of websites

pentesting-dump

Scripts, tools, and proof-of-concepts to aid in a penetration test.

mastersdegree

My masters degree dissertation for ISG, Royal Holloway (2011) on evolutionary fuzzing

natsec-cyberops-papers

List of whitepapers and documents on cyber operations and intelligence/national security matters.

pentest-tools

Custom pentesting tools

stupid-shellscripts

Repository of simply stupid shell scripts I often use to automate stuff here and there.

simpleglitch

World's crappiest and slowest file format fuzzer used to generate image files that can hopefully be considered glitch art.

AutoRecon

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

juliocesarfort.github.io

Static website

continuous-threat-modeling

A Continuous Threat Modeling methodology

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

fuzzing

Tutorials, examples, discussions, research proposals, and other resources related to fuzzing

algorithms

Minimal examples of data structures and algorithms in Python

CV

Curriculum vitae

fuzzotron

A TCP/UDP based network daemon fuzzer

LeakLooker

Find open databases with Shodan

avionics-fuzzing

bypass-url-parser

bypass-url-parser

idn-homograph-attack

Resources for "IDN Homograph Attack" for HSLU FKOM blog post testat

libfuzzer-workshop

Repository for materials of "Modern fuzzing of C/C++ Projects" workshop.

pysnake

Playing around with pygame

Ripple-20-Detection-Logic

Ripple20 Critical Vulnerabilities - Detection Logic and Signatures

ripple20

A Zeek package for the passive detection of "Ripple20" vulnerabilities in the Treck TCP/IP stack.

tiny-regex-c

Small portable regex in C

umap2

Umap2 is the second revision of NCC Group's python based USB host security assessment tool.

Windows-GDI-fuzzer

Windows Graphics Device Interface (GDI+) fuzzer

writeup