Name: Luca Carettoni
Type: User
Company: @doyensec
Bio: I like to experiment with computers, trying to understand how they work and eventually breaking them. At times, I fix things.
Location: San Francisco / Warsaw
Blog: https://www.doyensec.com
Luca Carettoni's Projects
Burp Suite AMF Extension
Burp Suite extension to generate Intruder payloads using Radamsa
BurpCSJ extension for Burp Pro - Crawljax Selenium JUnit integration
A generation-based, context-free grammar fuzzer.
List DTDs and generate XXE payloads using those local DTDs.
:electron: Build cross-platform desktop apps with JavaScript, HTML, and CSS
ESLint rules for Node Security
The world's easiest TRNG to get right
J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.
A tool to check which keychain items are available to an attacker once an iOS device has been jailbroken
Base utilities shared by all linkedin open source projects
Unofficial security patch for Ubiquiti Networks mFi Controller 2.1.11
ParrotNG is a tool capable of identifying Adobe Flex applications (SWF) vulnerable to CVE-2011-2461
A Simple PHP Renderer for Slim 3 (or any other PSR-7 project)
Cloud security configuration checks
Look-Ahead Java Deserialization Library
Signal — Private Messenger for Windows, Mac, and Linux
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.