Andres Riancho

w3af. w3af: web application attack and audit framework, the open source web vulnerability scanner.

enumerate-iam. Enumerate the permissions associated with AWS credential set

nimbostratus. Tools for fingerprinting and exploiting Amazon cloud infrastructures

race-condition-exploit. Tool to help with the exploitation of web application race conditions

mongo-objectid-predict. Predict Mongo ObjectIds

websocket-fuzzer. HTML5 WebSocket message fuzzer

jwt-fuzzer. JWT fuzzer

cc-lambda. Search the common crawl using lambda functions

secure-ubuntu-desktop. Maintain a list of tips and tricks to be used by Ubuntu users to secure their laptops.

w3af-webui. Django Web UI contributed by Yandex for w3af.

vpc-vpn-pivot. Pivot into private VPC networks using a VPN connection

django-moth. A Django vulnerable Web application for testing the w3af framework

w3af-moth. A set of vulnerable PHP scripts used to test w3af's vulnerability detection features.

w3af-kali. w3af packaging for Kali distribution

nimbostratus-target. This repository holds a target infrastructure you can use for running the nimbostratus tools.

aws-audit-automation. Tools to automate AWS Cloud security assessments

splunk-logger. A logging handler for Splunk. Lets you send information to Splunk directly from your Python code.

w3af-api-client. REST API client to consume w3af

pico-wavsep. A minimalistic way to run WAVSEP

aws-backup. AWS Backup implementation in terraform

owaspantisamy. Automatically exported from code.google.com/p/owaspantisamy

docker-anomalies. Docker container anomaly detection

pico. Tool to identify and exploit timing attacks

dirty-dependency-check. Vulnerability dependency check for Maven projects

w3af-module. Tools to install w3af as a Python module

burp-proxy-search. Burp suite HTTP history advanced search

docker-tag-naming. A small tool that helps name docker tags

collector. Collect performance metrics for any software using AWS

sentinela. Sentinela is a highly configurable operating system watchdog which can take actions based on pre-configured rules.

w3af-packages. Files and utilities that define w3af packages and installers for Windows, Debian, FreeBSD, etc.

w3af-api-docker. Docker image for w3af REST API with nginx, uwsgi and supervisord

wivet. Web Input Vector Extractor Teaser

w3af-qa. Quality related stuff for w3af.

cryptopals. My solutions to the cryptopals challenge

django-uwsgi-nginx-ssh. Django 1.5.1 with uwsgi, nginx and SSH.

NoSQLMap. Automated NoSQL database enumeration and web application exploitation tool.

py-xchat-twitter. Twitter client written as an XChat plugin (Python)

hash-blender. Takes various inputs and separators, mixes them, applies a hash function and verifies if match was found

w3af-performance-analysis. Analysis tool for performance output generated by w3af

wavsep. The Web Application Vulnerability Scanner Evaluation Project

qotd. A simple quote of the day library

cloudmapper. CloudMapper helps you analyze your Amazon Web Services (AWS) environments.

pico-string-compare-local. String comparison scripts for pico

burp-extensions. Collection of Burp extensions

flower. Real-time monitor and web admin for Celery distributed task queue

HTTPretty. HTTP client mocking tool for Python, it's like ruby's FakeWeb for python

scripts. scripts from pixelbeat.org

cloudjack. Route53/CloudFront Vulnerability Assessment Utility

w3af-kali-ci. A helper repository to build w3af-kali in CircleCI

high-entropy-json. Call Lyft's high-entropy-string for each string in a JSON document

django-celery-email. A Django 1.2+ email backend that uses a celery task for sending the email.

pebble. Multi threading and processing eye-candy.

panelseguridad. Introducción al mundo de la seguridad

docker-jinja. The extension to Docker you want. ed

django-rest-framework-timing. Minimalistic Django REST framework to test timing attacks

PMapper. A tool for quickly evaluating IAM permissions in AWS.