Repositories list

• prototype-pollution

  Public
  JavaScript

  •1•0•0•0•Updated Jun 5, 2025Jun 5, 2025

• llm-webmail

  Public
  Python

  •0•0•0•0•Updated May 30, 2025May 30, 2025

• spikee

  Public
  HTML

  •12•48•0•0•Updated May 27, 2025May 27, 2025

• drozer

  Public
  The Leading Security Assessment Framework for Android.

  androidjavasecurity+ 6mobilepentestingdrozermwrwithsecuremobsec

  Python

  •

  Other

  •803•4.2k•5•1•Updated May 13, 2025May 13, 2025

• IceKube

  Public
  Python

  •

  Apache License 2.0

  •10•178•9•0•Updated Apr 24, 2025Apr 24, 2025

• TheExtendables

  Public
  C++

  •1•7•0•0•Updated Mar 27, 2025Mar 27, 2025

• ibm-sterling-b2b-integrator-poc

  Public
  PoC code for the LPE and RCE (CVE-2024-31903) attacks against the IBM Sterling B2B Integrator

  Java

  •0•1•0•0•Updated Feb 18, 2025Feb 18, 2025

• IAMGraph

  Public
  Python

  •

  Apache License 2.0

  •2•54•1•0•Updated Jan 8, 2025Jan 8, 2025

• cloud-security-vm

  Public
  Ansible/Vagrant/Packer files to create a virtual machine with the tooling needed to perform cloud security assessments

  HCL

  •

  Apache License 2.0

  •10•141•0•0•Updated Jan 2, 2025Jan 2, 2025

• IAMSpy

  Public
  Python

  •

  Apache License 2.0

  •20•217•2•1•Updated Dec 12, 2024Dec 12, 2024

• fixit

  Public
  Python

  •

  Apache License 2.0

  •2•1•0•1•Updated Dec 11, 2024Dec 11, 2024

• workout-planner

  Public
  Python

  •2•4•0•0•Updated Dec 6, 2024Dec 6, 2024

• leonidas

  Public
  Automated Attack Simulation in the Cloud, complete with detection use cases.

  Python

  •

  MIT License

  •68•577•2•7•Updated Nov 28, 2024Nov 28, 2024

• freezer

  Public
  Rust implementation of IceKube download functionality

  Rust

  •

  Apache License 2.0

  •0•5•0•0•Updated Nov 19, 2024Nov 19, 2024

• cloud-wiki

  Public
  A public cloud security knowledgebase - https://www.secwiki.cloud/

  CSS

  •

  Apache License 2.0

  •19•51•0•2•Updated Nov 12, 2024Nov 12, 2024

• llama-3-prompt-injection-fine-tuning

  Public
  Python

  •

  Apache License 2.0

  •1•1•0•0•Updated Oct 21, 2024Oct 21, 2024

• encap-attack

  Public
  Sniff and attack networks that use IP-in-IP or VXLAN encapsulation protocols.

  Python

  •

  GNU General Public License v2.0

  •6•21•0•0•Updated Aug 30, 2024Aug 30, 2024

• Jandroid

  Public
  Python

  •

  BSD 3-Clause "New" or "Revised" License

  •72•338•5•0•Updated Aug 29, 2024Aug 29, 2024

• drozer-agent

  Public
  The Android Agent for the Drozer Security Assessment Framework.

  androidjavasecurity+ 6mobilepentestingdrozermwrwithsecuremobsec

  Java

  •

  BSD 3-Clause "New" or "Revised" License

  •66•190•2•1•Updated Aug 29, 2024Aug 29, 2024

• android-keystore-audit

  Public
  JavaScript

  •

  Other

  •108•433•6•1•Updated Aug 20, 2024Aug 20, 2024

• drozer-modules

  Public
  javasecuritymobile+ 4pentestingandroiddrozermwr

  Python

  •64•154•2•0•Updated Apr 23, 2024Apr 23, 2024

• llm-vulnerable-recruitment-app

  Public
  An example vulnerable app that integrates an LLM

  Python

  •

  Apache License 2.0

  •2•21•0•0•Updated Apr 5, 2024Apr 5, 2024

• lolcerts

  Public
  A repository of code signing certificates known to have been leaked or stolen, then abused by threat actors

  YARA

  •

  Apache License 2.0

  •27•356•1•1•Updated Apr 3, 2024Apr 3, 2024

• sieve

  Public
  Java

  •

  BSD 3-Clause "New" or "Revised" License

  •1•9•0•0•Updated Mar 27, 2024Mar 27, 2024

• CVE-2021-25374_Samsung-Account-Access

  Public
  This script can be used to gain access to a victim's Samsung Account if they have a specific version of Samsung Members installed on their Samsung Device, and if the victim's device is from the US or Korea region.

  Python

  •20•27•0•0•Updated Feb 25, 2024Feb 25, 2024

• slide-decks

  Public
  2•4•0•0•Updated Jan 31, 2024Jan 31, 2024

• damn-vulnerable-llm-agent

  Public
  Python

  •

  Apache License 2.0

  •61•289•0•1•Updated Dec 29, 2023Dec 29, 2023

• usb-consumer-control

  Public
  C

  •

  Apache License 2.0

  •8•40•0•0•Updated Nov 19, 2023Nov 19, 2023

• azure-service-tag-abuse

  Public
  Scripts and other content to go with Aled Mehta's talk "Tag You're Exposed" at DEF CON Cloud Village 2023

  HCL

  •0•0•0•0•Updated Aug 21, 2023Aug 21, 2023

• megafeis-palm

  Public
  PoC Code for Vulnerabilities Found in MEGAFEIS-branded Smart Locks & their Mobile Companion App: DBD+

  iotiot-researchoklok+ 7megafeisbofeismart-locksbluetooth-lockswithsecureshehzadesecurity

  Python

  •

  Apache License 2.0

  •0•1•0•0•Updated Mar 20, 2023Mar 20, 2023