Pinned Repositories
ansible-role-modsecurity
An Ansible role to install and manage ModSecurity
ansible-role-nginx
Ansible role to install and manage nginx configuration
BankOfSPARSA
device-health-app-python
An emulation of the Duo Device Health App written in Python
ModSecurity
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis. With over 10,000 deployments world-wide, ModSecurity is the most widely deployed WAF in existence.
ModSecurity-Flask
The Flask connector ModSecurityv3
ModSecurity-Interactive-Demo
ModSecurity-pcap
The ModSecurity Pcap Connector
okta-flowcharting
A set of scripts designed to generate flowcharts to visually show Okta OIE Global Session Policies and Authentication Policies
StockData
Information for the Shmoocon talk: Playing the Short Game: The Effects of Data Breaches on Share Prices
csanders-git's Repositories
csanders-git/device-health-app-python
An emulation of the Duo Device Health App written in Python
csanders-git/StockData
Information for the Shmoocon talk: Playing the Short Game: The Effects of Data Breaches on Share Prices
csanders-git/okta-flowcharting
A set of scripts designed to generate flowcharts to visually show Okta OIE Global Session Policies and Authentication Policies
csanders-git/ModSecurity-Interactive-Demo
csanders-git/owasp-modsecurity-crs
OWASP ModSecurity Core Rule Set (CRS) Project (Official Repository)
csanders-git/patchwork-blog
csanders-git/Waf2Py
Waf2Py is a nice and easy to use web interface for modsecurity and nginx implementation.
csanders-git/cartography
Cartography is a Python tool that consolidates infrastructure assets and the relationships between them in an intuitive graph view powered by a Neo4j database.
csanders-git/docker-compose-actions-workflow
GitHub Actions workflow example using Docker Compose to build and test a multi-container stack
csanders-git/duo_client_python
csanders-git/fleet
A flexible control server for osquery fleets
csanders-git/ftw
Framework for Testing WAFs (FTW!)
csanders-git/ftw-1
Framework for Testing WAFs (FTW!)
csanders-git/gophish
Open-Source Phishing Toolkit
csanders-git/ISTS17-Store
Store Site for ISTS
csanders-git/jss-recipes
AutoPkg recipes that use JSSImporter to upload software packages to your JSS.
csanders-git/maxlength-drupal
csanders-git/modsecurity-crs-docker
csanders-git/modsecurity-docker
The Official ModSecurity Docker Image
csanders-git/okta-sdk-python
csanders-git/owasp-crs-technical-discussion
csanders-git/pip
The Python package installer
csanders-git/py42
csanders-git/pymodsecurity
Python Bindings for ModSecurity v3
csanders-git/pyTenable
Tenable API Library for Tenable.io and TenableSC
csanders-git/TCP-SeqNum
Means to sniff 802.11 traffic and obtain TCP session info using netfiter_queue. Use that data to construct a packet in scappy.
csanders-git/truffleHog
Searches through git repositories for high entropy strings and secrets, digging deep into commit history
csanders-git/uuidv1-bruteforcing
A simple example to go along with a blog post on the feasibility of UUIDv1 brute forcing
csanders-git/waflz
multi tenant modsecurity implementation
csanders-git/WPSeku
WPSeku - Wordpress Security Scanner