Wyatt Dahlenburg

interactsh-collaborator. Burpsuite plugin for Interact.sh

VhostFinder. Identify virtual hosts by similarity comparison

werkzeug-debug-console-bypass. Werkzeug has a debug console that requires a pin. It's possible to bypass this with an LFI vulnerability or use it as a local privilege escalation vector.

CVESearch. Query various sources for CVE proof-of-concepts

spring-gateway-demo. Sample Spring application to Demonstrate the Gateway Actuator

pyhprof. Parse HPROF files from the Spring Boot Heapdump Actuator

canary. CLI tool written in Go to generate Canary Tokens from https://canarytokens.org

Hounds. Chromium based web crawler that identifies in-scope urls

LogicalFuzzingEngine. A Burpsuite extension written in Python to perform basic validation fuzzing

Chegg. A simple exploit on Chegg that was found and submitted on April 29, 2015

aws-native-rce. Collection of payloads to work with AWS services

Sourcerer. Ruby based utility to apply rules to url datasources and insert filtered results into a Sidekiq compatible Redis queue

nfsshell. Userspace NFS client shell

Traveling-Salesperson-Problem. Princeton Traveling Salesperson Problem solved with an O(N2) algorithm

Catching-Plagiarists. Java

HttpComparison. Compare raw HTTP responses to identify signficant differences

qsreplace. Accept URLs on stdin, replace all query string values with a user-supplied value

SlurpLogin. Generate Selenium IDE Test Cases via a Burpsuite Plugin

rogue-jndi. A malicious LDAP server for JNDI injection attacks

msf-rpc-client. Golang based RPC client to communicate with Metasploit. Based off Black Hat Go's example.

NeoPixelRpiWebServer. JavaScript