righettod

poc-graphql

Research on GraphQL from an AppSec point of view.

toolbox-pentest-web

Docker toolbox for pentest of web based application.

burp-piper-custom-scripts

Custom scripts for the PIPER Burp extensions.

log-requests-to-sqlite

BURP extension to record every HTTP request send via BURP and create an audit trail log of an assessment.

website-passive-reconnaissance

Script to automate, when possible, the passive reconnaissance performed on a website prior to an assessment.

powershell-android-utils

PowerShell module providing utility commands to manipulate a APK file on Windows

toolbox-jwt

Docker toolbox with different scripts having for the objective to perform different kinds of attacks against JWT tokens.

code-snippets-security-utils

Provides different utilities methods to apply processing from a security perspective.

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

Invoke-CreateModuleHelpFile

PowerShell function to create a HTML help file for a module and all it's commands.

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

param-miner

pkcheck

Program brute forcing the passphrase of a private key

sandbox

Provide network listeners during online training web challenges/labs.

toolbox-codescan

Customized toolbox to perform offline scanning of a code base.

voxxeddays-lux-2018

Demonstration videos and presentation regarding the talk given at the VOXXED LU 2018 conference.

voxxeddays-lux-2022

Demonstration videos and presentation regarding the talk given at the VOXXED LU 2022 conference.

www-project-secure-headers

The OWASP Secure Headers Project

BChecks

BChecks collection for Burp Suite Professional

bchecks-library

Store custom BCheck scripts created prior to propose them to the BCheck PortSwigger repository.

oshp-stats

Stats about HTTP response security headers usage mentioned by the OSHP.

oshp-tracking

Repository used to organize freely the work on the OSHP projects.

oshp-validator

Venom tests suite to validate an HTTP security response headers configuration against OSHP recommendation.

oshp.github.io

righettod.github.io

Redirection to personal website

rsa_sign2n

Deriving RSA public keys from message-signature pairs

timesheet-utils

Program that I used to know the number of working days and hours according to Luxembourg public holidays to fill my professional timesheet.

toolbox-regex

Toolbox to have a local instance of RegExr to create regex against sensitive/private content.

voxxeddays-lux-2016

Demonstration videos and presentation regarding the talk given at the VOXXED LU 2016 conference.

voxxeddays-lux-2024

Demonstration videos and presentation regarding the talk given at the VOXXED LU 2024 conference.