Derek Callaway

werdlists. :keyboard: Wordlists, Dictionaries and Other Data Sets for Writing Software Security Test Cases

ssltest-stls. :hammer_and_wrench: Proof-of-concept code for Heartbleed a.k.a. CVE2014-0160 with STARTTLS support for various protocols

pathgro. :seedling: combinatoric pathname wordlist expansion--it's like Miracle-Gro(tm) for your dirbusting technique!

bounty-targets. :dart: Information About Bug Bounty Program Targets

irc-uncloak-nse. :busts_in_silhouette: NSE (NMap Scripting Engine) Lua code for detecting IRC networks with IP address uncloaking weakness

hex4vbs. :man_technologist: Hex-encoded VBScript Statements Pair Obfuscation & Circumvention of MSIE or Its Sister-Product IIS

scevron. SCan EVerything with ruby RONin (Derbycon 4.0 "Family Rootz" Code)

zap-attack. :zap: Conduct attacks based on information gathered from the OWASP ZAP API

pafogenz. Pathname generator for directory brute-forcing web apps

iisleakenv. :droplet: IIS CGI Environment Variable Leakage Proof-of-Concept

fjorge. netcat-like program for HTTP(S)

inetaddr. :electron: Bash functions to convert numeric Internet addresses from/to single value and dotted-quad representations with decimal, octal and/or hexadecimal

cgiaudit. :package: general-purpose, "black box" CGI auditing tool (ARCHIVE)

githose. :potable_water: BASH Helper Scripts for Mapping Parallelized GitHub API Functions to User Names in Technicolor!

nmap2csv. Convert default nmap scan output to comma-seperated values format..

combos_permutedirs. :spider_web: Use the combinatorics gem to permute the power set of slash-delimited directory names in local and network path names as a penetration testing reconnaissance technique

Awesome-Cybersecurity-Datasets. A curated list of amazingly awesome Cybersecurity datasets

uncloakirc-freenode. :busts_in_silhouette: Ruby script to uncloak users' virtual hosts on the FreeNode IRC network

strglob. :fast_forward: Shared library that expands supplied globbing pattern syntax into multiple strings

security-cheatsheets. 🔒 A collection of cheatsheets for various infosec tools and topics.

porkbind. :pig: Nameserver security scanner (ARCHIVE)

usernamer. Pentest Tool to generate usernames/logins based on supplied names.

cmdlog. Command Logging LSM (Linux Security Module)

twitter-userid-enum. :bird: Enumerate Twitter Users Concurrently Based on ID Numbers

uri-encodings-fuzzer. :smirk_cat: Fuzz a given URI with encoding techniques provided by LibWhisker a.k.a. LW2

tac. :paw_prints: tac (reverse cat) brief bash script

ip6cat. The Swiss Army Knife of IPv6 Addressing

syscaller. :call_me_hand: Get Linux status info without running GNU binutils programs (use procfs to break out of restricted shells)

dotfiles. :file_cabinet: Configuration and runcom files often hidden in $HOME