urma

microphisher

µphisher reference implementation

rom-hacking

ROM hacking support tools, scripts and documentation

ucblog

Sample web application for secure development practices demonstrations

indirect-reference

Node.js port of OWASP ESAPI AccessReferenceMap for secure indirect references

acme-banking

ACME Internet Banking App for educational purposes

acme-banking-vue

SPA version of the acme-banking web application

chezmoi-dotfiles

chezmoi-managed dotfiles

datastore-api

Simple API for security demonstration purposes

euler-project

Implementation for some of the Euler Project problems

express-openapi

An unopinionated openapi framework for express

faraday

Collaborative Penetration Test and Vulnerability Management Platform

gatsby-source-s3

A Gatsby source plugin to query against an S3 bucket (including images!)

git-hooks-sandbox

Template project for git hook setup

go-horse-bank-app

Go Horse banking application for demonstration

hashlib

Simple wrapper around node crypto hash libraries for demonstration purposes

hawkeye-reporter

Web UI for visualisation of Hawkeye Scanner reports (built with Gatsby)

insecure-sandbox

jenkins-security-pipeline

jwt-sandbox

JWT sandbox application for testing/debugging

presentations

Slide decks and supporting content for public presentations

saml2aws

CLI tool which enables you to login and retrieve AWS temporary credentials using a SAML IDP

slack-image-metadata-poc

Transfer files embedded in image metadata over Slack

TestSSLServer

urma.github.io

Personal blog (artifacts only)