Pinned Repositories
AES_ANSI_x9.31
Implementation of NIST recommended PRNG ANSI X9.31 using 128-bit AES
bucketsperm
bugshop
low-hanging
Lightweight and extensible horizontal vulnerability scanner
plz-secrets
resolvable
Merge outputs from multiple subdomain enumeration tools and resolve IPv4/6/CNAME addresses for it
resolvers
List of periodically validated public DNS resolvers
RSA-CRT-fault-attack
xssable
A vulnerable blogging platform used to demonstrate XSS vulnerabilities.
janmasarik's Repositories
janmasarik/resolvers
List of periodically validated public DNS resolvers
janmasarik/bugshop
janmasarik/low-hanging
Lightweight and extensible horizontal vulnerability scanner
janmasarik/bucketsperm
janmasarik/plz-secrets
janmasarik/resolvable
Merge outputs from multiple subdomain enumeration tools and resolve IPv4/6/CNAME addresses for it
janmasarik/xssable
A vulnerable blogging platform used to demonstrate XSS vulnerabilities.
janmasarik/gitleaks
Audit git repos for secrets 🔑
janmasarik/altdns
Generates permutations, alterations and mutations of subdomains and then resolves them
janmasarik/Amass
In-depth DNS Enumeration and Network Mapping
janmasarik/argo
Argo Workflows: Get stuff done with Kubernetes.
janmasarik/argo-events
Event-based dependency manager for Kubernetes.
janmasarik/aws-sdk-go
AWS SDK for the Go programming language.
janmasarik/can-i-take-over-xyz
"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
janmasarik/CloudScraper
CloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.
janmasarik/connexion
Swagger/OpenAPI First framework for Python on top of Flask with automatic endpoint validation & OAuth2 support
janmasarik/docsearch-scraper
DocSearch - Scraper
janmasarik/dumb-password-rules
Shaming sites with dumb password rules.
janmasarik/examplenodejs
janmasarik/GCPBucketBrute
A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.
janmasarik/generate-bucketnames
janmasarik/git-url-parse
:v: A high level git url parser for common git providers.
janmasarik/handouts
materials we hand out
janmasarik/node-postgres
PostgreSQL client for node.js.
janmasarik/resolvers-data
janmasarik/S3Scanner
Scan for open AWS S3 buckets and dump the contents
janmasarik/second-order
Second-order subdomain takeover scanner
janmasarik/spaces-finder
A tool to hunt for publicly accessible DigitalOcean Spaces
janmasarik/subjack
Subdomain Takeover tool written in Go
janmasarik/www-chapter-czech-republic
OWASP Foundation Web Respository