GoSecure

Canada & United States

Pinned Repositories

csp-auditor
Burp and ZAP plugin to analyse Content-Security-Policy headers or generate template CSP configuration from crawling a Website
Language:Java139 10 729
DLLPasswordFilterImplant
DLL Password Filter Implant with Exfiltration Capabilities
Language:C138 35 1023
dtd-finder
List DTDs and generate XXE payloads using those local DTDs.
Language:Kotlin640 13 3111
malboxes
Builds malware analysis Windows VMs so that you don't have to.
Language:Python1k 63 81136
php7-opcache-override
Security-related PHP7 OPcache abuse tools and demo
Language:Python315 10 475
pyrdp
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
Language:Python1.7k 42 291265
pywsus
Standalone implementation of a part of the WSUS spec. Built for offensive security purposes.
Language:Python327 27 1044
template-injection-workshop
Workshop on Template Injection (6 exercises) covering Twig, Jinja2, Tornado, Velocity and Freemaker engines.
Language:CSS128 6 136
WSuspicious
WSuspicious - A tool to abuse insecure WSUS connections for privilege escalations
Language:C#368 22 750
xxe-workshop
Workshop given at Hack in Paris 2019
Language:JavaScript125 6 642

GoSecure's Repositories

GoSecure/break-fast-serial
A proof of concept that demonstrates asynchronous scanning for Java deserialization bugs
Language:Python55 7 215
GoSecure/ysoserial
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
Language:Java46 6 07
GoSecure/gophish-cli
Gophish Python cli to perform huge phishing campaigns
Language:Python40 6 59
GoSecure/44con-code-review-workshop
References, tools and sample payloads
116
GoSecure/find-sec-bugs
The FindBugs plugin for security audits of Java web applications and Android applications. (Also work with Groovy and Scala projects)
Language:Java9 4 03
GoSecure/jenkins-fsb
Jenkins instance with preconfigured jobs to analyze Java binaries using Find Security Bugs.
Language:Shell6 6 14
GoSecure/orange-code-widget
:orange: Widget for Orange to visualize code sample
Language:Python6 2 02
GoSecure/wsuspect-proxy
WSUSpect Proxy - a tool for MITM'ing insecure WSUS connections
Language:Python6 5 04
GoSecure/cowrie
Cowrie SSH Honeypot (based on kippo)
Language:Python4 11 02
GoSecure/owasp-workshop-zap
Atelier pratique sur le développement d'extension ZAP / Workshop on ZAP extension development
Language:HTML4 5 02
GoSecure/packer
Packer is a tool for creating identical machine images for multiple platforms from a single source configuration.
Language:Go4 9 0
GoSecure/tls-fingerprinting
TLS Fingerprinting
Language:C4 4 01
GoSecure/api-client-python
A Python API Client for Gophish
Language:Python3 5 0
GoSecure/confoo-xss-bypass-demos
Demonstration for the presentation Modern XSS
3 5 03
GoSecure/docker-cowrie
Docker Cowrie Honeypot image
Language:Shell3 5 02
GoSecure/backslash-powered-scanner
Finds unknown classes of injection vulnerabilities
Language:Java2 2 0
GoSecure/findbugs-plugin
Jenkins findbugs plugin
Language:Java2 3 01
GoSecure/roslyn-security-guard
Roslyn analyzers that aim to help security audit on .NET applications.
Language:C#2 2 0
GoSecure/rwhtml
A peculiar markdown-to-HTML converter
Language:Ruby2 4 0
GoSecure/yasuo
A ruby script that scans for vulnerable & exploitable 3rd-party web applications on a network
Language:Ruby2 5 0
GoSecure/cpAnsible
Ansible module provides control over a Check Point Management server using Check Point's web-services APIs.
Language:Python1 9 0
GoSecure/cti
Cyber Threat Intelligence Repository expressed in STIX 2.0
1
GoSecure/oletools
oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.
Language:Python1 4 0
GoSecure/pandas
Flexible and powerful data analysis / manipulation library for Python, providing labeled data structures similar to R data.frame objects, statistical functions, and much more
Language:Python1 4 0
GoSecure/SprayingToolkit
Scripts to make password spraying attacks against Lync/S4B & OWA a lot quicker, less painful and more efficient
Language:Python1 1 02
GoSecure/unfetter
Identifies defensive gaps in security posture by leveraging Mitre's ATT&CK framework. iadgov
1 4 0
GoSecure/VVV
An open source Vagrant configuration for developing with WordPress
Language:Shell1 3 0
GoSecure/chocolatey-coreteampackages
These packages that are managed by the chocolatey core team. To get a package added here, the official chocolatey account needs to have push access to the package on chocolatey.org.
Language:PowerShell
GoSecure/chocolateypackages.AnthonyMastrean
Application packages for Windows
Language:PowerShell4 0
GoSecure/ChocolateyPackages.MarkRobertJohnson
All of the Chocolatey packages that have been publicly published
Language:PowerShell4 0