ewilded

api-ms-win-code-debug-l1-1-0

A sample DLL appending a text file with the list of high integrity/SYSTEM process that loaded it (for issue testing).

icmpsh-s-linux

GNU/Linux version of the https://github.com/inquisb/icmpsh slave

Intrusive

Intrusive is a realtime log analysis tool designed to perform IDS and anomalies detection functions

localdataHog

String-based secret-searching tool (high entropy and regexes) based on truffleHog

parambrute

A little Burp Scanner extension (python) detecting page's parameters (fast binary search).

PPID_spoof

An example of how to spawn a process with a spoofed parent PID (Visual C++)

psychoPATH

psychoPATH - an advanced path traversal tool. Features: evasive techniques, dynamic web root list generation, output encoding, site map-searching payload generator, LFI mode, nix & windows support, single byte generator, payload export.

SCARY

PHP Source Code Analyzer written in Perl (taint checking)

shelling

SHELLING - a comprehensive OS command injection payload generator

xssValidatorTestCases

A set of test case scripts for xssValidator Burp Extension

ewilded/Intrusive

Intrusive is a realtime log analysis tool designed to perform IDS and anomalies detection functions

ewilded/parambrute

A little Burp Scanner extension (python) detecting page's parameters (fast binary search).

ewilded/xssValidatorTestCases

A set of test case scripts for xssValidator Burp Extension

ewilded/magic_params

A simple helper for generating sets of potential hidden variables used in broken authentication/authorisation and latent verbosity/debug modes in a Burp Intruder-friendly fashion.

ewilded/Pattern_Discovery

Very simple and powerful pattern (PCRE) discovery tool for fast and effective log analysis, useful in debugging, SIEM development etc.

ewilded/poison_exifdata

Simple helper for string exiftags poisoning (either with custom payload or with a holder to use with e.g. Burp Intruder -> Scanner integration).

ewilded/content_discovery

I am just posting my thoughts on the Content Discovery process

ewilded/memplunge

# Information disclosure searcher/debugger written by ewilded # This script conducts search over the whole memory allocated by all existing processes (and optionally opened file descriptors), looking for particular string. # The initial application of this script was to facilitate the process of discovering various dependancies and potential information disclosure vulnerabilities. The idea is to put the string which's flow we are interested in into the input of relevant application/service and then look for it in the memory.

ewilded/OSWindowsPrivEscalation

the Open Source Windows Privilege Escalation Guide

ewilded/authz

ewilded/Lilith

Lilith, The Open Source C++ Remote Administration Tool (RAT)

ewilded/timebased_token_pattern_discovery

A simple script intended for discovery of current timestamp based security token patterns

ewilded/upload-scanner

HTTP file upload scanner for Burp Proxy

ewilded/vulndev_scripts

Garbage scripts helping with some vulndev tasks

ewilded/authbasic_lockout_check

This little helper generates a list of invalid base64-encoded username:password sequences, followed by the correct one.

ewilded/Autorize

Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests

ewilded/bluebox-ng

Pentesting framework using Node.js powers, focused in VoIP.

ewilded/burp-suite-error-message-checks

Burp Suite extension to passively scan for applications revealing server error messages

ewilded/burplist

ewilded/dict_teacher

small perl script for vocab learning

ewilded/dirs_from_URLs.pl

ewilded/extractparam

ewilded/flowable-engine

A compact and highly efficient workflow and Business Process Management (BPM) platform for developers, system admins and business users.

ewilded/Infosec_Reference

An Information Security Reference That Doesn't Suck

ewilded/ioctlbf

Windows Kernel Drivers fuzzer

ewilded/IoTSeeker

Created by Jin Qian via the GitHub Connector

ewilded/markdown-here

Google Chrome, Firefox, and Thunderbird extension that lets you write email in Markdown and render it before sending.

ewilded/sleepy-puppy

Sleepy Puppy XSS Payload Management Framework

ewilded/sysadmin_scripts

Few system administration scripts

ewilded/xssValidator

This is a burp intruder extender that is designed for automation and validation of XSS vulnerabilities.