Aon's Cyber Solutions - Security Testing (Formerly GDS)

New York, NY

Pinned Repositories

Add-Trusted-Certificate-to-iOS-Simulator
Script for easily importing a trusted CA certificate into the iOS Simulator's trust store. This provides application testers the ability to intercept SSL traffic when using the simulator for testing.
Language:Python46 8 124
burpee
Python object interface to requests/responses recorded by Burp Suite
Language:Python36 24 117
GDS-PMD-Security-Rules
Custom security ruleset for the popular Java static analysis tool PMD.
Language:Java61 11 229
GWT-Penetration-Testing-Toolset
A set of tools made to assist in penetration testing GWT applications. Additional details about these tools can be found on my OWASP Appsec DC slides available here: http://www.owasp.org/images/7/77/Attacking_Google_Web_Toolkit.ppt
Language:Python222 40 686
Jetleak-Testing-Script
Script to test if a server is vulnerable to the JetLeak vulnerability
Language:Python144 14 461
PSAttack
A portable console aimed at making pentesting with PowerShell a little easier.
Language:C#44 10 015
SQLBrute
SQLBrute is a tool for brute forcing data out of databases using blind SQL injection vulnerabilities.
Language:Python71 25 035
WCF-Binary-SOAP-Plug-In
This is a Burp Suite plug-in designed to encode and decode WCF Binary Soap request and response data ("Content-Type: application/soap+msbin1). There are two versions of the plug-in available (consult the README for more information).
Language:C#45 20 029
Whitepapers
A collection of publicly released whitepapers
49 12 019
wifitap
wifitap updated for BT5r3
Language:Python152 27 154

Aon's Cyber Solutions - Security Testing (Formerly GDS)'s Repositories

GDSSecurity/GWT-Penetration-Testing-Toolset
A set of tools made to assist in penetration testing GWT applications. Additional details about these tools can be found on my OWASP Appsec DC slides available here: http://www.owasp.org/images/7/77/Attacking_Google_Web_Toolkit.ppt
Language:Python222 40 686
GDSSecurity/wifitap
wifitap updated for BT5r3
Language:Python152 27 154
GDSSecurity/Jetleak-Testing-Script
Script to test if a server is vulnerable to the JetLeak vulnerability
Language:Python144 14 461
GDSSecurity/SQLBrute
SQLBrute is a tool for brute forcing data out of databases using blind SQL injection vulnerabilities.
Language:Python71 25 035
GDSSecurity/GDS-PMD-Security-Rules
Custom security ruleset for the popular Java static analysis tool PMD.
Language:Java61 11 229
GDSSecurity/Whitepapers
A collection of publicly released whitepapers
49 12 019
GDSSecurity/WCF-Binary-SOAP-Plug-In
This is a Burp Suite plug-in designed to encode and decode WCF Binary Soap request and response data ("Content-Type: application/soap+msbin1). There are two versions of the plug-in available (consult the README for more information).
Language:C#45 20 029
GDSSecurity/PSAttack
A portable console aimed at making pentesting with PowerShell a little easier.
Language:C#44 10 015
GDSSecurity/burpee
Python object interface to requests/responses recorded by Burp Suite
Language:Python36 24 117
GDSSecurity/cloud-and-control
Language:Python26 21 020
GDSSecurity/OSX-Continuity-Dialer-POC
Language:Objective-C23 85 08
GDSSecurity/PaddingOracleDemos
Language:Python22 86 010
GDSSecurity/Anti-CSRF-Library
This library was co-developed with a leading financial institution in order to build a single solution for Cross-Site Request Forgery (CSRF) prevention that is flexible enough to deploy firm-wide within diverse Java/J2EE web application environments.
Language:Java20 26 124
GDSSecurity/DotNET-MVC-Enumerator
Language:C#20 85 09
GDSSecurity/AntiXSS-for-Java
AntiXSS for Java is a port of the Microsoft Anti-Cross Site Scripting (AntiXSS) v1.5 library for .NET applications. The library requires Java 1.4 or higher, but has no other prerequisites.
Language:Java16 28 018
GDSSecurity/sol-function-profiler
Solidity Contract Function Profiler
Language:JavaScript16 5 04
GDSSecurity/Code-from-O-reilly-Network-Security-Tools
Tools developed for the book Network Security Tools: Writing, Hacking, and Modifying Security Tools (Published April 2005 by O'Reilly - ISBN 0-596-00794-9). These examples, along with the rest of the examples from the book, are also available from O'Reilly.
Language:Perl15 20 017
GDSSecurity/JSSE_Fortify_SCA_Rules
Custom Fortify SCA rules to detect common JSSE certification validation flaws
Language:Java11 87 09
GDSSecurity/SSLSecurityChecker
IronWASP module to test security of SSL services. Ported from http://www.bolet.org/TestSSLServer/
Language:C#11 7 012
GDSSecurity/Presentations
This repository contains slide decks and other materials for talks and research presented at various conferences.
10 20 09
GDSSecurity/SubstrateDemo
ListLock APK contains the demo APK for the Using Mobile Substrate With Android Applications blog post
Language:Java9 21 04
GDSSecurity/blazentoo
Blazentoo is an Adobe AIR application that can be used to exploit insecure Adobe BlazeDS and LiveCycle Data Services ES servers. Blazentoo provides the ability to seamlessly browse web content, abusing insecurely configured Proxy Services.
6 19 06
GDSSecurity/Convert2FPR
Utility for converting Findbugs, ESLint and PMD XML results into HP Fortify FPRs
Language:XSLT6 85 010
GDSSecurity/sentrygun
Rogue AP killer
Language:Python6 9 06
GDSSecurity/Scala-Findbugs-Sample
Sample Findbugs custom detector for finding potentially insecure Scala code.
Language:Java5 21 04
GDSSecurity/SubstrateDemo2
Language:Java5 17 06
GDSSecurity/mimegusta
Configurable content-sniffing XSS test bed
Language:PHP4 6 04
GDSSecurity/sslscan
sslscan tests SSL/TLS enabled services to discover supported cipher suites
Language:C3 5 07
GDSSecurity/sentrygun-server
Language:Python2 7 02
GDSSecurity/fusionpbx
Official FusionPBX - A full-featured domain based multi-tenant PBX and voice switch for FreeSwitch.
Language:PHP5 0