F-Secure LABS

timeinator

Timeinator is an extension for Burp Suite that can be used to perform timing attacks over an unreliable network such as the internet.

Jandroid

dref

DNS Rebinding Exploitation Framework

android-keystore-audit

LinuxCatScale

Incident Response collection and processing scripts with automated reporting scripts

C3

Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits.

SharpGPOAbuse

SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled by that GPO.

drozer

The Leading Security Assessment Framework for Android.

SharpClipHistory

SharpClipHistory is a .NET application written in C# that can be used to read the contents of a user's clipboard history in Windows 10 starting from the 1809 Build.

SharpGPO-RemoteAccessPolicies

A C# tool for enumerating remote access policies through group policy.

3d-accelerated-exploitation

3D Accelerated Exploitation

Azurite

Enumeration and reconnaissance activities in the Microsoft Azure Cloud.

ViridianFuzzer

Kernel driver to fuzz Hyper-V hypercalls

captcha_cracking

Helper scripts and tutorial for cracking text-based CAPTCHAs

needle

The iOS Security Testing Framework

XRulez

A command line tool for creating malicious outlook rules

z3_and_angr_binary_analysis_workshop

Code and exercises for a workshop on z3 and angr

KernelFuzzer

Cross Platform Kernel Fuzzer Framework

wePWNise

WePWNise generates architecture independent VBA code to be used in Office documents or templates and automates bypassing application control and exploit mitigation software.

win_driver_plugin

A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers.

incognito

One Token To Rule Them All https://labs.mwrinfosecurity.com/blog/incognito-v2-0-released/

drozer-modules

CVE-2018-4121

macOS 10.13.3 (17D47) Safari Wasm Exploit

gists

Short handy snippets from the @mwrlabs team

bsides18_breakfree

Example tools and output from BSides 2018 "I Want to Break Free"

Athena

GUI Tool to generate threat intelligence information in various formats

OSXFuzz

macOS Kernel Fuzzer

coralsun

macOS Cython IOKit Utility Library

needle-agent

The iOS Agent for the Needle Security Assessment Framework