Dennis Kniep

DeviceCodePhishing. This is a novel technique that leverages the well-known Device Code phishing approach. It dynamically initiates the flow when the victim opens the phishing link and instantly redirects them to the authentication page. No authentication method, not even FIDO, is able to protect against this type of attack.

reveal.js-plugin-spotlight. A plugin for Reveal.js allowing to highlight the current mouse position with a spotlight.

grafana-datasource-plugin-neo4j. Grafana Datasource Plugin for querying data from Neo4j with cypher

GQLRaider. GQL Burp Extension

interactsh_deploy. Interactsh deployment to AWS EC2 Instance with Terraform

fido-cross-device-phishing. This is a PoC for a phishing technique using FIDO cross‑device (hybrid) authentication. An attacker can run an AitM proxy that shows a fake, OS‑like QR code prompt in the browser. The attack requires placing one or more Bluetooth beacons within the victim’s Bluetooth range.

provider-temporal. Crossplane Temporal.io Provider

reveal.js-plugin-sequence-diagrams. A plugin for Reveal.js allowing to add Sequence Diagrams.

Spring4Shell-vulnerable-app. Java

envoy-kerberos-ntlm-demo. Using Envoy as Reverse Proxy to an upstream WebApplication which uses NTLM or Kerberos as HTTP Authentication Method (aka. IWA - Integrated Windows Authentication)

zaproxy-scripts. This repository contains scripts for Zaproxy

keycloak-hsm. Keycloak Extension for HSM (Hardware Security Module) support

keycloak-hsm-crypki. Keycloak Extension, which uses Crypki Service for signing with an underlying HSM (Hardware Security Module) or other PKCS #11 device.

provider-springclouddataflow. Crossplane Spring Cloud Data Flow Provider

fluentd-troubleshooting. How to troubleshoot and drill down FluentD configuration issues

alarmcontrol. Java

log4j-scan. A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

crossplane-demo. Demo of Crossplane

denniskniep.github.io. Blog

presto_iceberg_minio_demo. Shell

ping-demo. Java

spring-cloud-dataflow-sdk-go. Go SDK for Spring Cloud DataFlow's Open API