Repositories list

• disclaimer

  Public
  HTML

  •0•0•0•0•Updated Dec 20, 2024Dec 20, 2024

• JsseTLS

  Public
  Java

  •2•2•0•0•Updated Dec 10, 2024Dec 10, 2024

• thesis_layout

  Public template
  Latex template for students writing a bachelor or master thesis

  TeX

  •22•22•0•0•Updated Oct 29, 2024Oct 29, 2024

• exposee_layout

  Public template
  Latex template for students writing an exposé for a seminar or thesis

  TeX

  •7•6•0•1•Updated Oct 18, 2024Oct 18, 2024

• ShareJSXML

  Public
  Library to allow concurrent editing of XML documents using Operational Transforms based on ShareJS 0.6

  CoffeeScript

  •

  MIT License

  •1•2•0•0•Updated Oct 11, 2024Oct 11, 2024

• TlsPraktikumServer

  Public
  TLS 1.3 Server framework for our TLS Praktikum lecture

  Java

  •2•0•0•2•Updated Oct 7, 2024Oct 7, 2024

• WS-Attacker

  Public
  WS-Attacker is a modular framework for web services penetration testing. It is developed by the Chair of Network and Data Security, Ruhr University Bochum (https://nds.rub.de/ ) and the Hackmanit GmbH (https://www.hackmanit.de/).

  Java

  •

  GNU General Public License v2.0

  •117•476•17•2•Updated Oct 3, 2024Oct 3, 2024

• alpaca-attack

  Public
  HTML

  •2•1•0•0•Updated Sep 21, 2024Sep 21, 2024

• RTLF

  Public
  0•0•0•0•Updated Sep 16, 2024Sep 16, 2024

• Terrapin-Website

  Public
  This repository hosts the public website for the paper "Terrapin Attack: Breaking SSH Channel Integrity By Sequence Number Manipulation" via GitHub Pages.

  sshcryptographyattack+ 1vulnerability

  HTML

  •0•3•0•0•Updated Sep 2, 2024Sep 2, 2024

• PRET

  Public
  Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.

  Python

  •

  GNU General Public License v2.0

  •614•4k•60•6•Updated Aug 2, 2024Aug 2, 2024

• SSO-Monitor

  Public
  JavaScript

  •0•0•0•0•Updated Jul 8, 2024Jul 8, 2024

• DISTINCT

  Public
  Dynamic In-Browser Single Sign-On Tracer Inspecting Novel Communication Techniques

  oauthauthenticationpopup+ 9authorizationiframeresearch-toolweb-securityopenid-connectresearch-papersingle-sign-on+ 2

  JavaScript

  •

  Apache License 2.0

  •0•10•1•0•Updated May 13, 2024May 13, 2024

• Terrapin-Artifacts

  Public
  This repository contains the artifacts for the paper "Terrapin Attack: Breaking SSH Channel Integrity By Sequence Number Manipulation".

  sshcryptographyattack+ 7pocvulnerabilityartifactsterrapincve-2023-48795cve-2023-46445cve-2023-46446

  Python

  •

  Apache License 2.0

  •9•64•0•0•Updated May 3, 2024May 3, 2024

• Artifacts-With-Great-Power-Come-Great-Side-Channels

  Public
  Python

  •

  Apache License 2.0

  •0•0•0•0•Updated May 3, 2024May 3, 2024

• Terrapin-Scanner

  Public
  This repository contains a simple vulnerability scanner for the Terrapin attack present in the paper "Terrapin Attack: Breaking SSH Channel Integrity By Sequence Number Manipulation".

  sshcryptographyattack+ 2vulnerabilityvulnerability-scanner

  Go

  •

  Apache License 2.0

  •66•953•5•0•Updated Mar 17, 2024Mar 17, 2024

• xsinator.com

  Public
  XS-Leak Browser Test Suite

  xs-leaks

  JavaScript

  •

  GNU General Public License v3.0

  •8•73•0•0•Updated Dec 19, 2023Dec 19, 2023

• AutoLeak

  Public
  Find XS-Leaks in the browser by diffing DOM-Graphs in two states

  xs-leaks

  JavaScript

  •

  GNU General Public License v3.0

  •1•15•0•0•Updated Nov 27, 2023Nov 27, 2023

• AKE-Cryptoverif-Tutorial

  Public
  HTML

  •

  BSD 2-Clause "Simplified" License

  •1•1•2•0•Updated Feb 16, 2023Feb 16, 2023

• DocumentSignatureValidator

  Public
  Automation tool for evaluating the signature status of office documents

  C++

  •2•2•0•0•Updated Feb 14, 2023Feb 14, 2023

• internet-crypto

  Public
  0•0•0•0•Updated Feb 2, 2023Feb 2, 2023

• REST-Attacker

  Public
  REST-Attacker is designed as a proof-of-concept for the feasibility of testing generic real-world REST implementations. Its goal is to provide a framework for REST security research.

  Python

  •

  GNU Lesser General Public License v3.0

  •16•77•5•0•Updated Jan 9, 2023Jan 9, 2023

• PrOfESSOS

  Public
  PrOfESSOS is our open source implementation for fully automated Evaluation-as-a-Service for SSO. PrOfESSOS introduces a generic approach to improve the security of OpenID Connect implementations by systematically detecting vulnerabilities.

  Java

  •14•28•7•24•Updated Jan 8, 2023Jan 8, 2023

• OOXML_Signature_Security

  Public
  USENIX 2023 Artifacts

  2•11•0•0•Updated Nov 25, 2022Nov 25, 2022

• FutureTrust

  Public
  FutureTrust analyzes electronic identification (eID) services in Europe and beyond. It is funded within the EU Framework Programme for Research and Innovation (Horizon 2020).

  Java

  •3•12•1•3•Updated Nov 16, 2022Nov 16, 2022

• OpenID-Attacker

  Public
  Java

  •

  GNU General Public License v2.0

  •23•29•9•4•Updated Sep 1, 2022Sep 1, 2022

• medfuzz

  Public
  Fuzzing plattform for medical protocols

  C++

  •

  Other

  •3•2•0•0•Updated Jun 13, 2022Jun 13, 2022

• alpaca-code

  Public
  Artifacts to the ALPACA attack.

  C

  •15•60•2•0•Updated Apr 5, 2022Apr 5, 2022

• BouncyCastleTLS

  Public
  BouncyCastle TLS examples

  Java

  •1•2•0•2•Updated Jan 4, 2022Jan 4, 2022

• WS-TLS-Scanner

  Public
  The TLS-Scanner for the SIWECOS Project

  Java

  •

  Other

  •7•6•0•0•Updated Dec 18, 2021Dec 18, 2021