theMiddleBlue

followers

following

stars

SicuraNext

Italy

https://www.secjuice.com/author/themiddle/

@AndreaTheMiddle

Organizations

coreruleset

theMiddle's repositories

CVE-2019-11043

(PoC) Python version of CVE-2019-11043 exploit by neex

Language:Python144 9 2

DNSenum

Bash script for DNS Enumeration.

Language:ShellMIT94 40

nmap-elasticsearch-nse

Nmap NSE script for enumerate indices, plugins and cluster nodes on an elasticsearch target

Language:Lua42 30

modsecurity-to-elasticsearch

Very simple and primitive Python script that sends ModSecurity JSON Audit Logs to Elasticsearch

Language:PythonMIT17 2 1

ReputationIP

set of bash scripts to get a list of bad reputation IP addresses

Language:Shell10 40

challenge-bypass-input-validation

Bypass strict input validation to exploit RCE

Language:PHP8 20

myLittlePuny

Python script that checks for IDN homograph on a given domain name

Language:Python8 20

OWASP-CRS-PoC

Tool that helps creating PoC for testing new CRS rule and rule-set

Language:Shell3 2 1

goscan

Interactive Network Scanner

Language:GoMIT2 20

poc-magento227-sqli

PoC SQLi on Magento 2.2.7

Language:Shell2 20

JShielder

Hardening Script for Linux Servers/ Secure LAMP-LEMP Deployer/ CIS Benchmark

Language:PHPGPL-3.01 10

API-Security-Checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

MIT020

bettercap

The Swiss Army knife for 802.11, BLE and Ethernet networks reconnaissance and attacks.

Language:GoNOASSERTION020

codeql-test

Test codeql

Language:Shell020

coreruleset

OWASP ModSecurity Core Rule Set (Official Repository)

Language:PythonApache-2.0010

jquery.terminal

jQuery Terminal Emulator - web based terminal

Language:JavaScriptMIT020

ModSecurity

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis. With over 10,000 deployments world-wide, ModSecurity is the most widely deployed WAF in existence.

Language:C++Apache-2.0010

msc_pyparser

A ModSecurity rules parser

Language:PythonGPL-3.0010

nikto

Nikto web server scanner

Language:Perl020

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

MIT000

owasp-modsecurity-crs

OWASP ModSecurity Core Rule Set (CRS) Project (Official Repository)

Language:PerlApache-2.0010

SecLists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

Language:PHP020

secrules_parsing

A parser for the SecRules Langue

Language:PythonApache-2.0010

vis

Dynamic, browser-based visualization library

Language:JavaScriptApache-2.0020

wfuzz

Web application fuzzer

Language:PythonGPL-2.0020

wordpress-rule-exclusions-plugin

Rule exclusion plugin for WordPress.

Apache-2.0010

www-project-modsecurity-core-rule-set

OWASP Foundation Web Respository

Language:HTML010

xss-cheatsheet-data

This repository contains all the XSS cheatsheet data to allow contributions from the community.

NOASSERTION010