The B.L.O.G experiment

Content Discovery/Directory Brute-forcing using Python3

My papers

A utility to test the success of xss payloads on a target website. Use responsibly.

A collection of often-used scripts and tools

VulnCode: Secure Code Review Training -- This application allows the user to practice identifying vulnerabilities within codeblocks. Each codeblock was engineered to contain a single vulnerability. There are three difficulty levels. Each exercise contains a detailed explanation which becomes available after a correct answer or three wrong answers.

Automatically exploit time-based blind SQL injection vulnerabilities

Lists of elements that compose HTML and SVG structure to fuzz in security testing checks

🤖 Telegram Bot written on Python for basic web-app analysis.

Some netsec workflow notes

Yet another security blog

Malspider is a web spidering framework that detects characteristics of web compromises.

writeups/solvers for CTF challenges

Writeups for Over The Wire wargames, for total security noobs.

A collection of small web-security challenges

Extract endpoints from stdin or files.

Automagically filter URLs with Bug Bounty program scope rules scraped from the internet.

Rule packs for Signal Sciences power rules platform.

Discover hidden debugging parameters and uncover web application secrets