ticarpi

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

my-pentesting-repo

This is a set of tips and reminders for pentesting processes and scripts/programs. Initially for personal use, but if anyone else finds the reminders useful, then enjoy! A few links for useful tools and files. Some tools written by me.

dockerauto

Automation for Docker images

Research

A python decryption script for an unnamed cipher used by PUP/PUA-packed executables

ticarpi.github.io

:triangular_ruler: A flexible two-column Jekyll theme. Perfect for personal sites, blogs, and portfolios hosted on GitHub or your own server.

ticwebtools

A collection of web tools crafted for web app pentesting

crackstuff

A personal collection of password lists, rules, masks, processes and syntax for cracking passwords - particularly focused on domain accounts

dockerauto_resources

Exploits_Public

Some exploits I've found, mostly PoCs for other ppl's stuff

File-Upload-Tests

impacket-adcs

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

newstarter_passlist

PTDownloads

Tooling (not mine) zipped for download. May contain malware. You have been warned...

reporting-and-disclosures

Details of my CVEs, disclosures, reporting from vulnerability research

rsa_sign2n

Deriving RSA public keys from message-signature pairs