Ian Haken

Expert
@JackOfMostTrades

https://www.linkedin.com/pub/ian-haken/1a/475/6b6/en

gadgetinspector. A byte code analyzer for finding deserialization gadget chains in Java applications

1.1k

aws-kms-pkcs11. PKCS#11 Provider Using AWS KMS

59

bluebox. Automated Exploit Toolkit for CVE-2015-6095 and CVE-2016-0049

51

tls-tproxy. Transparent L4 proxy for adding mutual TLS

18

catlog. Put files in Certificate Transparency logs and pull them back out

18

spiffe-user-demo. Proof of concept SPIFFE implementation that provides user SVIDs based on web SSO integration.

11

vssm. Virtual Software Security Module: A self-healing, autoscaling, HSM-like service for the cloud

7

ssh-broker. A simple scheme for managing SSH keys

5

java-ykpiv. Pure Java implementation of the ykpiv library for interfacing with the PIV application of yubikeys.

5

ysoserial. A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

4

ssh-sk-example. Example of verifying SSH SK attestation documents

3

flashpaper. FlashPaper is a micro webapp for sending end-to-end encrypted read-once messages.

3

era-of-trains. Go

2

Schemaverse. The Schemaverse is a space-based strategy game implemented entirely within a PostgreSQL database. Compete against other players using raw SQL commands to command your fleet. Or, if your PL/pgSQL-foo is strong, wield it to write AI and have your fleet command itself!

2

pinkie-live. Automatically exported from code.google.com/p/pinkie-live

2

Convergence. An agile, distributed, and secure alternative to the Certificate Authority system.

1

grpc-java-issue-8120. Java

1

mythtv. The official MythTV repository

1

efnwbot. PHP

1
19
Apply