Dolev Farhi

Damn-Vulnerable-GraphQL-Application. Damn Vulnerable GraphQL Application is an intentionally vulnerable GraphQL service implementation designed for learning about and practising GraphQL Security.

graphw00f. graphw00f is GraphQL Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology is behind a given GraphQL endpoint.

graphql-cop. Security Auditor Utility for GraphQL APIs

Black-Hat-Bash. The Black Hat Bash book repository

Black-Hat-GraphQL. The Black Hat GraphQL Book Repository

Open-Policy-Agent-Alfred. Reasonably Usable Self-hosted Version of OPA's Playground

nmap-graphql-introspection-nse. NSE Script for GraphQL Introspection Check

Pentest-Ansible. Ansible playbooks for Penetration Testing tooling installation

OWASP-VWAD. The OWASP Vulnerable Web Applications Directory project (VWAD) is a comprehensive and well maintained registry of all known vulnerable web applications currently available.

bottle-acl-openpolicyagent. Add Authorization to Python's Bottle Framework with Open Policy Agent

apache-flink-directory-traversal.nse. Apache Flink Directory Traversal (CVE-2020-17519) Nmap NSE Script

dolevf.

graphql-server. This is the core package for using GraphQL in a custom server easily

CVE-2020-9483. PoC of SQL Injection vul(CVE-2020-9483,Apache SkyWalking)

nmap-http-403-bypass-nse. Nmap NSE implementation of byp4xx.sh

security-disclosures. Python

flask-sockets. Elegant WebSockets for your Flask apps.

graphql-threat-matrix. GraphQL attack vector framework used by security professionals to research security gaps in GraphQL implementations

nuclei-templates. Community curated list of templates for the nuclei engine to find security vulnerabilities.

jupyterlab. JupyterLab computational environment.

awesome-opa. A curated list of OPA related tools, frameworks and articles

nerve. NERVE Continuous Vulnerability Scanner

airflow. Apache Airflow - A platform to programmatically author, schedule, and monitor workflows

Public-AMI-Scanner. Scans Public AWS AMIs

opa. An open source, general-purpose policy engine.

presentations.