Florian Walter

sessionprobe. SessionProbe is a multi-threaded tool designed for penetration testing and bug bounty hunting. It evaluates user privileges in web applications by taking a session token and checking access across a list of URLs, highlighting potential authorization issues.

secure-code-review-challenges. This repo contains the code for my secure code review challenges. People used this as the primary resource to pass FAANG AppSec interviews 😉

subsnipe. SubSnipe is a tool designed to help find subdomains that are vulnerable to takeover.

github-dorks. The repository contains useful GitHub dorks for finding open-source vulnerabilities.

vulnerability-research. This repository contains information on the CVEs I found.

veracode-javascript-packager. Simple auto-packager for JavaScript/TypeScript (i.e., Node, Angular, React, Vue) that creates a zip to upload for Veracode Static Analysis

code-review-week-challenges. This repo contains a series of challenges that get harder and harder to exploit

path-normalization-bypasses. This repo contains labs for bypassing path normalization issues involving Nginx and e.g. Flask and Node.js

worst-fit-poc. This repo contains a PoC of exploiting Worst Fit (props to Orange Tsai and Splitline who presented this research at Black Hat EMEA 2024)

leotrace-community-challenges. This repo contains the source code for the LeoTrace community challenges

xssprobe. XSSProbe is a multi-threaded pentesting tool designed to assist in finding Cross-Site Scripting vulnerabilities.

createObjectURL-XSS-PoC. PoC for how createObjectURL() can be vulnerable to XSS

random-bruteforce. This repo is a practical demonstration of bruteforcing a number generated by a not cryptographically secure random number generator

basic-aws-enumeration. This repo contains useful commands for enumerating common AWS services

Secure-Processing-XXE-Tests-Java. This repository show that the FEATURE_SECURE_PROCESSING functionality doesn't provide any security benefit against XXE in Java

pirate-vuln-app. A repository containing a very simple pirate-themed vulnerable app

JNI-Shared-Object-Injection-PoC. This repo contains a PoC for how an attacker might be able to inject a malicious shared object into a Java application using JNI.

java-gadget-chain. This project contains a Java deserialization vulnerability that is exploitable with some ysoserial payloads, but also contains a custom class that can be leveraged to get command execution upon deserialization.