16 open source projects by GoSecure

Security-related PHP7 OPcache abuse tools and demo

WSuspicious - A tool to abuse insecure WSUS connections for privilege escalations

Burp and ZAP plugin to analyse Content-Security-Policy headers or generate template CSP configuration from crawling a Website

DLL Password Filter Implant with Exfiltration Capabilities

Standalone implementation of a part of the WSUS spec. Built for offensive security purposes.

Materials for the Binary Analysis Workshop presented at NorthSec 2020

Builds malware analysis Windows VMs so that you don't have to.

RDP man-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact

List DTDs and generate XXE payloads using those local DTDs.

Workshop on Template Injection (6 exercises) covering Twig, Jinja2, Tornado, Velocity and Freemaker engines.

Tool that assists in migrating firewall rules from Cisco to Checkpoint. Will optimize rules for you (rationalization, reuse merging, etc.).

Gophish Python cli to perform huge phishing campaigns

Burp extension to decode NTLM SSP headers and extract domain/host information

Minimalist cheat sheet for developpers to write secure code

A proof of concept that demonstrates asynchronous scanning for Java deserialization bugs

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.