Brandon Perry

gray_hat_csharp_code. This repository contains full code examples from the book Gray Hat C#

wicked_cool_shell_scripts_2e. Full shell scripts for the second edition of Wicked Cool Shell Scripts

yaml-fuzz. A generated corpus, seed, and target for a fuzz job

Potato. Windows privilege escalation through NTLM Relay and NBNS Spoofing

crestron. Tools for taking over Crestron Windows CE devices

clamav-fuzz. A fuzz job for ClamAV

vulnerable_xxe. A C# web handler that is vulnerable to XXE with PoC. This is to serve as an example of what vulnerable C# code looks like.

vulnerable_soap_service. This is a SOAP service written in C# that has intentional SQL injection vulnerabilties.

volatile_reader. A small, fast, and efficient offline event log parser, registry reader, pcap file analyzer, IL decompiler (with ICSharpCode), and pagefile analyzer written in C# and using GTK.

VolatileOCPP. Security-Focused Implementation of Open Charge Alliance OCPP Test Document Scenarios

rubytooth. Updated ruby bluetooth bindings based on ruby-bluetooth

rising_sun. security tool automation playground

ical-fuzz. Results from fuzzing libical across many versions

vulnerable_json_sqli. A small JSON web service that is vulnerable to SQL injection, with fuzzer to fuzz the endpoint.

connect_back_bind_payloads. Simple connect-back and bind payloads written in C# and work on Linux, Mac, and Windows.

midifuzz.

volatileminds_modules. Ruby

dirty_c-_decompiler.

vulnerable_cookie_swap. Can username find out what the admin's password is? There's no SQL.

is_a_fetus_a_person. Is a fetus a person?

pdf_jbig2_gen. C#

tiff-fuzz.

ntreg-ruby. ruby library for reading nt registry hives offline

sass-fuzz. Groff

managed_trig_methods. C#

od-autoassess_legacy. An old Bash script I wrote to automate security tools a long time ago. Probably no longer works or useful, just here to be here.

psd-fuzz.

Twitterizer. Twitterizer is a .NET class library that provides an easy-to-use interface for the Twitter web api. It is written for developers. It's features are easy to discover and follow a consistent design pattern.

crossplatform_metasploit_payload.

im_scripts. Shell

tga-fuzz.