Corben Leo

gau. Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

subjs. Fetches javascript file from a list of URLS or subdomains.

secretz. secretz, minimizing the large attack surface of Travis CI

theftfuzzer. TheftFuzzer is a tool that fuzzes Cross-Origin Resource Sharing implementations for common misconfigurations.

230-OOB. An Out-of-Band XXE server for retrieving file contents over FTP.

hacks. Repo of useful scripts

cspparse. A tool to evaluate Content Security Policies.

jenkinz. Retrieve the complete build history for every job ever created and executed on a given Jenkins instance.

otxurls. Fetch known urls from AlienVault's Open Threat Exchange for given hosts

brute53. A tool to bruteforce nameservers when working with subdomain delegations to AWS.

DOD-Recon. Recon for Department of Defense HackerOne program

research. miscellaneous security research stuff

rickrolllogs. tool to rick roll access.logs

reckdns. A kinda reckless dns resolver. Still under development.

rlyCTF. rlyCTF (relay CTF) challenge to emulate real-world SSRF attacks.

sslc2. Simple C&C example in assembly that retrieves commands from the Organizational Unit (OU) field in an SSL certificate

lc.github.io. Information Security blog by Corben Leo @hacker_

newsletter-code. Repository for any code I send out in newsletters.

bugbountylink. URL Shortener using Flask & MySQL

void. Throw distracting sites into the void on Mac

upload-scanner. HTTP file upload scanner for Burp Proxy

pfzf. fzf for yanking code/workspace context for LLM workflows.

certspotter. Certificate Transparency Log Monitor

ds_storescanner. A tool to scan for .DS_Store files on webservers

ctf-dev. Various CTF's I've created over time

zgrab2. Fast Go Application Scanner

buz. Serverless multi-protocol + multi-destination event collection system.

color. Color package for Go (golang)

trufflehog. Find and verify credentials

safewrite. simple golang library for safe/multi-threaded file writing