Decrypt encrypted Fortienet FortiOS firmware images
Updated 2023-08-02 06:41:05 -09:00
Heavily-modified fork of David Buchanan's dlinject project. Injects arbitrary assembly (or precompiled binary) payloads directly into x86-64, x86, and ARM32 Linux processes without the use of ptrace by accessing /proc/<pid>/mem. Useful for certain post-exploitation scenarios, recovering content from process memory, etc..
Updated 2022-11-01 09:27:18 -09:00
Determine the running software version of a remote F5 BIG-IP management interface.
Updated 2022-09-29 04:56:02 -09:00
Updated 2022-01-13 19:56:09 -10:00
Updated 2022-01-07 07:39:29 -10:00
Companion labs to "An Exploration of JSON Interoperability Vulnerabilities"
Updated 2021-02-24 18:22:18 -10:00
A ZigBee hacking toolkit by Bishop Fox
Updated 2021-01-05 06:42:49 -10:00
HTTP Request Smuggling over HTTP/2 Cleartext (h2c)
Updated 2020-09-15 10:25:46 -09:00
Updated 2019-11-22 11:07:50 -10:00
Little tool to suss out S3 permissions as visible to the public.
Updated 2019-11-14 06:54:58 -10:00
Web application that lets you test if your domain is vulnerable to email spoofing
Updated 2019-03-05 11:35:27 -10:00
PoC code from DEF CON 25 presentation
Updated 2017-08-02 08:00:06 -09:00