Erlend Oftedal

writings. blog posts

deserialize. intentionally vulnerable API

MalaRIA-Proxy. Proof of concept code (which means poor code quality) for a proxy abusing unrestricted cross domain policies.

RESTful-Security. My talk from Javazone 2012

ContentSecurityPolicy.Net. ASP.NET module for easily adding Content Security Policy through web.config. See readme below for syntax

gofigure. Simple library for animated drawings of arrows, boxes and text in HTML5

retire-site-scanner. Site-scanner using phantomjs and retire.js

csp-testing. For testing browser support for Content Security Policy

containerify. Build node.js docker images without docker

PoetAndDidntKnowIt. My exploratory code to test padding oracle attacks

cryptopals.js. Solutions for the matasano crypto challenges in node.js

helmet.js. Contextually escaped html/js templating

HashInjection. NoSQL injection - hash injection with rails and mongodb

HashExtender. Java

DigipostApi.Net. C#

WebRebels2012. WebRebels talk and code

eoftedal.github.com. HTML

RiskTracker. For tracking risk

AwesomeXSS. Awesome XSS stuff

WordRedactor. Command line utility for creating a redacted version of a Word document (.docx) on Mac OS X

dirlist. File system driver for mounting an nginx or apache directory listing as a local folder

dependency-track. Dependency-Track is an intelligent Software Composition Analysis (SCA) platform that allows organizations to identify and reduce risk from the use of third-party and open source components.

CrossDomainAndBrowserSecurity. Presentation

Attacks-on-web-application-crypto. Presentation

crypto. HTML

SafeNuGet. This repo has been moved to https://github.com/OWASP/SafeNuGet

WhiskWork. REST-based workflow management tool

HashDosTesterForJava. Test your java app for HashDos

Digipost-sync. Synker digipost-arkivets opplastede dokumenter mot en lokal katalog

Sublime-JSHint. Javascript Lint for Sublime Text editor via node.js (JSHint build system and python plugin)