Mikhail

TicTaaC. Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. Sugar-Free and Secure: no any external dependencies except for chart plotting are used

aws-threat-modeling-tool-template. Amazon Web Services (AWS) Microsoft Threat Modeling Tool Template

DocsReporter. Documents generation system in docx, odt, pdf, xhtml and pptx formats based on templates

HID-GamePad. HID GamePad device based on AVR ATMega8 and V-USB framework

jusbrelay. Multi-platform library for USB relay devices management on Java

dvwa-bdd-security. Security Tests of Damn Vulnerable Web Application (DVWA) with Cucumber, Selenium and OWASP ZAP API

tomcat-embed-core-9.0.31-CVE-2020-11996. tomcat-embed-core-9.0.31 CVE-2020-11996 Test PoC

SIM900D-sample. SMS guard firmware based on sim900d and AVR atmega32

devsecops-pipeline. Jenkinsfile with various SAST/DAST/SCA security tools

vulnj. Vulnerable Java (VulnJ): a project which contain actual attacks demonstrations, vulnerabilities of Java Applications and how to prevent them with tests

owapi. OneWire API store

nginx-baseline. DevSec Nginx Baseline - InSpec Profile (CIS Benchmark Controls Added)

drawio-secure-sdlc-diagram. Secure SDLC draw.io process diagram

onewire. Java

activemq-weblogic-integration. ActiveMQ to WebLogic integration demo

CVE-2019-10172. CVE-2019-10172 PoC and Possible mitigations

appsec-interview.

aes-cbc-security-research. Tampering and padding oracle attacks demonstration for AES CBC encryption

simple-thief-guarding-system. Simple thief-guarding system based on ATMega128, SIM900D and SEN32357 PIR Motion sensor

capicom-wrapper. Java wrapper for Microsoft capicom library (CSP)