phosphore

Lorenzo Stella's starred repositories

the_silver_searcher

A code-searching tool similar to ack, but faster.

Language:CApache-2.026103 427 841

lowdb

Simple and fast JSON database

Language:JavaScriptMIT21397 240 450

awless

A Mighty CLI for AWS

Language:GoApache-2.04976 93 269

terrascan

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

Language:GoApache-2.04703 68 430

BITB

Browser In The Browser (BITB) Templates

Language:JavaScript2760 570

Burp-Non-HTTP-Extension

Non-HTTP Protocol Extension (NoPE) Proxy and DNS for Burp Suite.

Language:Java1388 60 61

enumerate-iam

Enumerate the permissions associated with AWS credential set

Language:PythonGPL-3.01076 17 11

Windows-exploits

This project is only used for vulnerability verification to help security engineers better understand the system and carry out repair work. Please do not use it for other purposes.

1013 240

NimPlant

A light-weight first-stage C2 implant written in Nim.

Language:RustMIT789 13 22

regexploit

Find regular expressions which are vulnerable to ReDoS (Regular Expression Denial of Service)

Language:PythonApache-2.0789 14 16

paranoid_crypto

Paranoid's library contains implementations of checks for well known weaknesses on cryptographic artifacts.

Language:PythonApache-2.0785 24 10

weirdAAL

WeirdAAL (AWS Attack Library)

Language:Python774 26 55

tko-subs

A tool that can help detect and takeover subdomains with dead DNS records

Language:GoMIT740 27 22

tor-socks-proxy

🐳 Tiny Docker image (🤏 10MB) as 🧅 Tor SOCKS5 proxy 🛡

Language:DockerfileGPL-3.0533 14 32

xxeserve

XXE Out of Band Server.

Language:Ruby168 7 2

r2flutch

Tool to decrypt iOS apps using r2frida

Language:PythonGPL-3.0167 5 5

gatekeeper

GATEKEEPER: Inline and on-target defense

Language:C119 45 42

calc_security_poc

A sample of proof of concept scripts that run Calc.exe with full source code.

Language:C++90 4 2

Poiana

Meterpreter Reverse shell over TOR network using hidden services

Language:PythonMIT89 2 7

frida-ios

Frida scripts

Language:JavaScriptGPL-3.045 4 1

confuser

Dependency Confusion Security Testing Tool

Language:Python39 3 7

evil

Linux netfilter module to toggle evil bit (RFC 3514) in all outgoing IPv4 packets

Language:CGPL-2.027 4 1

request-filtering-agent

An http(s).Agent implementation that block request Private/Reserved IP addresses. Prevent SSRF.

Language:TypeScriptMIT21 4 9

electronegativity-action

The action integrates Electronegativity, a tool to identify misconfigurations and security anti-patterns in Electron applications, into GitHub CI/CD.

14 3 1

imagemagick-security-policy-evaluator

The ImageMagick Security Policy Evaluator allows developers and security experts to check if an XML Security Policy is hardened against a wide set of malicious attacks. It assists with the process of reviewing such policies, which is usually a manual task, and helps identify the best practices for ImageMagick deployments.

Language:JavaScript14 4 3