mgillam

castle-lab

Rough prototype for the Containerized Application Security Training Lab Environment - A k8s-based solution for tenant-per-student training lab environments for application security training.

csp-tuner

Web interface for reviewing CSP violations

CveSandboxes

evil-browser-toolkit

flagstone

A vulnerable app for those taking their first steps into application security training

k8s-labs

musashi-js

A set of Node applications for demonstrating web security concepts. Created for use in Samurai WTF.

samuraiwtf

The main SamuraiWTF collaborative distro repo.

mgillam/CveSandboxes

mgillam/castle-lab

Rough prototype for the Containerized Application Security Training Lab Environment - A k8s-based solution for tenant-per-student training lab environments for application security training.

mgillam/csp-tuner

Web interface for reviewing CSP violations

mgillam/evil-browser-toolkit

mgillam/flagstone

A vulnerable app for those taking their first steps into application security training

mgillam/golden.js

Quite probably the worst anti-xss library on the planet.

mgillam/js-cat

🐱 concatenate files

mgillam/mgillam.github.io

mgillam/htmx4pug

Extensions for the Pug template engine to support use in HTMX apps

mgillam/JS-Tap

JavaScript payload and supporting software to be used as XSS payload or post exploitation implant to monitor users as they use the targeted application. Also includes a C2 for executing custom JavaScript payloads in clients.

mgillam/repostart

Fork of degit - straightforward project scaffolding

mgillam/retire.js

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

mgillam/tiged

Community driven fork of degit