Jose Selvi

Delorean. NTP Main-in-the-Middle tool

AndroidPINCrack. Bruteforce the Android Passcode given the hash and salt.

fiesta. Tool implementing side-channel attacks against HTTPS

Jail0wnMe. Use a JailBreakMe 3.0 PDF file and change its Payload in order to get a reverse shell.

fiesta-old-py. FIESTA Attack

WebSearch. Search vhost names given a host range. Powered by Bing.

FaceCat. Covert Channel PoC using FaceBook

tcpprox. A small command-line TCP proxy utility written in Python

Necromant. Python Script that search unused Virtual Hosts in Web Servers

guesser. Universal char by char guesser for Injections Attacks (and probably more)

docker-breach. Docker image to exploit BREACH & TIME vulnerabilities

docker-metasploit. Metasploit docker image based on remnux/metasploit

phd. Files related to my PhD

metasploit-framework. Metasploit Framework

docker-llm-playground. This is a docker compose using ollama, open-webui and a custom filter implementing a LLM firewall. It was designed to train your skills in Prompt Injection and LLM security.

docker-crime. Docker image to exploit CRIME vulnerability

docker-r-masked-ngrams. Docker image for the paper: Selvi, J., Rodríguez, R. J., & Soria-Olivas, E. (2019). Detection of algorithmically generated malicious domain names using masked N-grams. Expert Systems with Applications, 124, 156-163.