Role in this project:
Back-end Developer & Security Engineer Contributions:2 releases, 273 commits, 9 PRs in 9 years 8 months
Contributions summary:Bryan implemented and refined features for a network attack tool. They added an implementation for scanning DHCP servers and built a PostgreSQL (Postgres) query parser. The user was also responsible for adding features like ICMP redirection, LLMNR and HTTP session hijacking. This user's work demonstrates expertise in networking, security protocols, and database interaction.
securitycybersecuritypenetration-testingpentestingattack
application server attack toolkit
Role in this project:
Back-end Developer Contributions:1 release, 134 commits, 4 PRs in 3 years 8 months
Contributions summary:Bryan's primary contribution was enhancing the application server attack toolkit by adding support for various versions of JBoss (WildFly) and incorporating functionality to interact with its management interface. This included modifying existing Python scripts for authentication, information retrieval, and deployment, along with adding a new fingerprint to identify a specific JBoss version. Furthermore, the user implemented new deployers, for example, an EJBInvokerServlet and related code, for exploiting vulnerabilities. The commits also involved fixing bugs related to SMB hash retrieval on different operating systems.
attackapplication-server