theMiddle Claim this profile

Python script that checks for IDN homograph on a given domain name

Host-agnostic pre-write security hook for coding agent: detects user-input patterns via Semgrep and emits deterministic, no-LLM security guidance.

(PoC) Python version of CVE-2019-11043 exploit by neex

Bash script for DNS Enumeration.

Nmap NSE script for enumerate indices, plugins and cluster nodes on an elasticsearch target

Very simple and primitive Python script that sends ModSecurity JSON Audit Logs to Elasticsearch

set of bash scripts to get a list of bad reputation IP addresses

Bypass strict input validation to exploit RCE

Tool that helps creating PoC for testing new CRS rule and rule-set

PoC SQLi on Magento 2.2.7

Interactive Network Scanner

Hardening Script for Linux Servers/ Secure LAMP-LEMP Deployer/ CIS Benchmark

Dynamic, browser-based visualization library

Software Development Kit for easy SPID/CIE access integration with simplesamlphp - developed and mantained by Michele D'Amico @damikael

Community curated list of templates for the nuclei engine to find security vulnerabilities.

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis. With over 10,000 deployments world-wide, ModSecurity is the most widely deployed WAF in existence.

Test codeql

A parser for the SecRules Langue

Rule exclusion plugin for WordPress.

OWASP ModSecurity Core Rule Set (Official Repository)

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

OWASP Foundation Web Respository

OWASP ModSecurity Core Rule Set (CRS) Project (Official Repository)

This repository contains all the XSS cheatsheet data to allow contributions from the community.

A ModSecurity rules parser

jQuery Terminal Emulator - web based terminal

Web application fuzzer

Nikto web server scanner

The Swiss Army knife for 802.11, BLE and Ethernet networks reconnaissance and attacks.

Checklist of the most important security countermeasures when designing, testing, and releasing your API