Sergey Bobrov

client-side-prototype-pollution. Prototype Pollution and useful Script Gadgets

content-type-research. Content-Type Research

BFScan. Tool for finding URLs, paths, secrets and generating raw HTTP requests and OpenApi specifications from config files and annotations used in JAR / WAR / APK applications.

cspp-tools. Client-Side Prototype Pollution Tools

WEB-INF-dict. List of configuration files from WEB-INF and META-INF for use in Unvalidated Forwards and JSP Include vulnerabilities.

jpg_payload. PHP

ctfs. CTF writeups

Burp-Ai-Substitutor. AI Substitutor is an extension for Burp Suite that uses AI functionality to substitute values of HTTP request parameters and headers.

CVE_PoCs. CVE PoCs

s3-request-signer. A Burp Suite and Caido extension for generating signed S3 requests.

s3-fingerprint. A list of headers and error pages of popular S3-compatible solutions for fingerprinting

s3-stands. Stands demonstrating typical S3-related configuration errors.

Default-directory-listring-pages. HTML

volgactf-2019-smarthome. VolgaCTF 2019 SmartHome Contest

SubjectAltName_Dumper. PHP

dualshock. Node.js module for DualShock (3 and 4) controllers.