Repositories

• ScoutSuite

  Multi-Cloud Security Auditing Tool

  aws security auditing cloud azure gcp
  Python GPL-2.0 316 2,082 63 (3 issues need help) 10 Updated Jul 19, 2020

• dapr

  Driver Attack Platform for Linux
  TypeScript 3 6 10 2 Updated Jul 18, 2020

• PMapper

  A tool for quickly evaluating IAM permissions in AWS.

  python aws iam botocore cloudsecurity
  Python AGPL-3.0 73 398 22 (1 issue needs help) 1 Updated Jul 16, 2020

• dirble

  Fast directory scanning and scraping tool

  web tool pentest pentest-tool
  Rust GPL-3.0 60 422 10 0 Updated Jul 16, 2020

• wssip

  Application for capturing, modifying and sending custom WebSocket data from client to server and vice versa.

  nodejs websocket websockets socket-io mitm
  JavaScript AGPL-3.0 55 355 14 3 Updated Jul 16, 2020

• sobelow

  Security-focused static analysis for the Phoenix Framework

  security elixir static-analysis phoenix-framework
  Elixir Apache-2.0 58 972 8 0 Updated Jul 14, 2020

• scrying

  A tool for collecting RDP, web and VNC screenshots all in one place
  Rust 2 13 7 0 Updated Jul 14, 2020

• Sniffle

  A sniffer for Bluetooth 5 and 4.x LE
  C 50 338 7 0 Updated Jul 13, 2020

• thetick

  A simple embedded Linux backdoor.
  Python LGPL-3.0 20 163 1 0 Updated Jul 11, 2020

• The_Automotive_Threat_Modeling_Template

  NCC Group Template for the Microsoft Threat Modeling Tool 2016 for Automotive Security
  11 23 2 0 Updated Jul 10, 2020

• SocksOverRDP

  Socks5/4/4a Proxy support for Remote Desktop Protocol / Terminal Services / Citrix / XenApp / XenDesktop
  C++ 51 300 0 0 Updated Jul 8, 2020

• Cyber-Defence

  Information released publicly by NCC Group's Cyber Defence team
  Python 93 333 0 0 Updated Jul 8, 2020

• Berserko

  Burp Suite extension to perform Kerberos authentication
  Java AGPL-3.0 15 83 4 0 Updated Jul 6, 2020

• nccfsas

  Information released publicly by NCC Group's Full Spectrum Attack Simulation (FSAS) team.
  C 22 92 0 1 Updated Jul 2, 2020

• LoggerPlusPlus

  Advanced Burp Suite Logging Extension
  Java AGPL-3.0 84 321 15 0 Updated Jul 2, 2020

• sadcloud

  A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure
  HCL AGPL-3.0 19 180 6 0 Updated Jun 30, 2020

• pairing-bls12381

  Pairing operations over the BLS12-381 elliptic curve in Haskell
  Haskell BSD-3-Clause 0 3 0 0 Updated Jun 29, 2020

• BinProxy

  BinProxy is a proxy for arbitrary TCP connections. You can define custom message formats using the BinData gem.
  Ruby AGPL-3.0 32 149 4 4 Updated Jun 24, 2020

• BurpImportSitemap

  Import To Sitemap is a Burp Suite Extension to import wstalker CSV file or ZAP export file into Burp Sitemap
  Java AGPL-3.0 1 0 0 0 Updated Jun 16, 2020

• listips

  A script that uses nmap to expand IP ranges into a list of IPs

  bash networking nmap ip pentesting
  Shell GPL-3.0 1 4 0 0 Updated Jun 11, 2020

• tracy

  A tool designed to assist with finding all sinks and sources of a web application and display these results in a digestible manner.

  chrome-extension firefox security chrome firefox-addon xss browser-extension
  JavaScript MIT 55 416 4 0 Updated May 21, 2020

• GTFOBLookup

  Offline command line lookup utility for GTFOBins (https://github.com/GTFOBins/GTFOBins.github.io) and LOLBAS (https://github.com/LOLBAS-Project/LOLBAS)

  python pentesting redteam privesc pentesting-tools gtfobins lolbas
  Python GPL-3.0 16 91 0 0 Updated May 19, 2020

• singularity

  A DNS rebinding attack framework.

  dns iot attack vulnerability dns-rebinding
  JavaScript MIT 85 530 0 0 Updated May 11, 2020

• house

  A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.

  android mobile frida pentest-tool
  JavaScript MIT 125 749 4 0 Updated May 10, 2020

• typofinder

  A finder of domain typos showing country of IP address
  Python AGPL-3.0 38 121 13 1 Updated May 6, 2020

• wstalker

  WStalker: an easy proxy

  proxy
  Go AGPL-3.0 5 19 0 0 Updated May 5, 2020

• autochrome

  This tool downloads, installs, and configures a shiny new copy of Chromium.
  HTML Apache-2.0 43 214 10 2 Updated May 3, 2020

• idahunt

  idahunt is a framework to analyze binaries with IDA Pro and hunt for things in IDA Pro
  Python 42 179 0 0 Updated Apr 30, 2020

• BLESuite

  BLESuite is a Python package that provides an easier way to test Bluetooth Low Energy (BLE) device
  Python MIT 27 105 11 3 Updated Apr 25, 2020

• keimpx

  Check for valid credentials across a network over SMB
  Python Apache-2.0 55 192 7 0 Updated Apr 23, 2020