Michael Stepankin

yaml-payload. A tiny project for generating SnakeYAML deserialization payloads

SecLists. SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

rogue-jndi. A malicious LDAP server for JNDI injection attacks