Eugene Lim

manuka. A modular OSINT honeypot for blue teamers

from-day-zero-to-zero-day. Scripts and examples for "From Day Zero to Zero Day" by Eugene Lim.

webpack-exploder. Unpack the source code of React and other Webpacked apps!

spring-boot-actuator-h2-rce. Sample Spring Boot App Demonstrating RCE via Exposed env Actuator and H2 Database

ogp-ctf-2024. A web CTF for training developers in bug hunting and secure coding!

CVE-2020-10665. POC for CVE-2020-10665 Docker Desktop Local Privilege Escalation

npm-scan. An extensible, heuristic-based vulnerability scanning tool for installed npm packages

npm-zoo. A zoo for malicious NPM packages

accent-trainer. Flask webapp/endpoint that compares the user's speech with different accents and assigns similarity scores based on speed, voice (DTW/MFCC), and accuracy. The accents are generated from Amazon Polly and accuracy analysis using Bing Speech API speech to text.

detect-cve-2024-4367. YARA detection rule for CVE-2024-4367 arbitrary javascript execution in PDF.js

serverless-recon-example. Example of a serverless web reconaissance workflow's AWS architecture.

icalendardb. A data

detecting-fake-text. Giant Language Model Test Room

lohrem-ipsum. A Singlish version of the classic Lorem Ipsum generator coded as a Racket webapp.

streamliner-doc-word-replacer. Flask webapp that replaces words in documents according to debate tournament rules. Useful if you want to quickly replace a dictionary of words and save syllables.

road-sign-manager. A civic hacking project in collaboration with MakeHaven and New Haven Transportation. A cloud road sign manager platform.

aws-amazon-polly-flask-sample. Amazon Polly implementation that mirrors the Python example provided by AWS, only using the Flask framework.

manuka-client. Frontend client for Manuka

unicollider. An elegant frontend to generate and detect possible Unicode transformation collisions.

SecLists. SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

npm-scan-backtest. Backtest npm-scan on past updates on npmjs

code4good-crash-course. A developer crash course for my team at Code4Good.

tsunami-security-scanner-plugins. This project aims to provide a central repository for many useful Tsunami Security Scanner plugins.

electronic-road-sign-simulator. Express app that simulates an electronic road sign that is updated over the web live via websockets.

manuka-listener. Listener honeypot for Manuka

manuka-server. REST API and business logic for Manuka

cryptopals-rust. Rust

SSRFTest. SSRF testing tool

jobcan-automatic-clock-chrome-extension. Chrome extension for automatic clocking on JobCan (Unofficial)