fzf for yanking code/workspace context for LLM workflows.

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

TheftFuzzer is a tool that fuzzes Cross-Origin Resource Sharing implementations for common misconfigurations.

secretz, minimizing the large attack surface of Travis CI

Repository for any code I send out in newsletters.

Information Security blog by Corben Leo @hacker_

Repo of useful scripts

A tool to evaluate Content Security Policies.

An Out-of-Band XXE server for retrieving file contents over FTP.

A kinda reckless dns resolver. Still under development.

simple golang library for safe/multi-threaded file writing

Simple C&C example in assembly that retrieves commands from the Organizational Unit (OU) field in an SSL certificate

Various CTF's I've created over time

A tool to bruteforce nameservers when working with subdomain delegations to AWS.

miscellaneous security research stuff

jenkinz is a tool to retrieve every build for every job ever created and run on a given Jenkins instance.

rlyCTF (relay CTF) challenge to emulate real-world SSRF attacks.

URL Shortener using Flask & MySQL

tool to rick roll access.logs

Recon for Department of Defense HackerOne program