GoSecure

Repositories

• pyrdp

  RDP man-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
  Python GPL-3.0 103 467 18 (6 issues need help) 5 Updated Aug 21, 2020

• unicode-pentester-cheatsheet

  An easy to navigate list of unicode characters that have risky transformations 💥
  HTML 0 0 0 0 Updated Aug 6, 2020

• frida-xamarin-unpin

  A Frida script to bypass Xamarin certificate pinning implementations
  C# 18 20 1 0 Updated Aug 4, 2020

• security-cheat-sheet

  Minimalist cheat sheet for developpers to write secure code

  security dotnet xss cheatsheet
  HTML 6 35 0 0 Updated Jul 17, 2020

• goinsecure-deserialization

  Accompanying material needed for the workshop
  Java 1 4 0 0 Updated Jul 15, 2020

• LOLBAS

  Forked from LOLBAS-Project/LOLBAS

  Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
  XSLT 375 0 0 0 Updated Jul 3, 2020

• presentations

  Material from presentations done by GoSecure researchers

  security research slides reveal-js presentations
  HTML 9 11 0 0 Updated May 21, 2020

• advanced-binary-analysis

  Materials for the Binary Analysis Workshop presented at NorthSec 2020
  HTML 11 15 0 0 Updated May 21, 2020

• malboxes

  Builds malware analysis Windows VMs so that you don't have to.

  vagrant packer virtual-machine python3 malware-analysis malware-research
  Python GPL-3.0 121 849 24 (6 issues need help) 2 Updated May 21, 2020

• CrackMapExec

  Forked from byt3bl33d3r/CrackMapExec

  A swiss army knife for pentesting networks
  Python BSD-2-Clause 965 2 0 0 Updated May 21, 2020

• csp-auditor

  Burp and ZAP plugin to analyse Content-Security-Policy headers or generate template CSP configuration from crawling a Website

  http security csp zap burp burp-plugin zap-plugin
  Java 29 111 1 0 Updated Apr 29, 2020

• DLLPasswordFilterImplant

  DLL Password Filter Implant with Exfiltration Capabilities

  credentials active-directory password pentest
  C MIT 16 101 6 (1 issue needs help) 0 Updated Feb 24, 2020

• reveal.js

  Forked from hakimel/reveal.js

  Added our own themes to reveal.js
  CSS MIT 15,021 0 0 0 Updated Feb 14, 2020

• sysmon-config

  Forked from SwiftOnSecurity/sysmon-config

  Sysmon configuration file template with default high-quality event tracing
  845 0 0 0 Updated Feb 5, 2020

• frida-mono-api

  Forked from freehuntx/frida-mono-api

  All the mono c exports, ready to be used in frida!
  JavaScript MIT 12 1 0 0 Updated Jan 30, 2020

• peas

  Forked from FSecureLABS/peas

  PEAS is a Python 2 library and command line application for running commands on an ActiveSync server e.g. Microsoft Exchange.
  Python 29 1 0 0 Updated Jan 7, 2020

• impacket

  Forked from SecureAuthCorp/impacket

  Impacket is a collection of Python classes for working with network protocols.
  Python 1,572 0 0 0 Updated Jan 2, 2020

• findbugs-idea

  Forked from scanban/findbugs-idea

  IntelliJ Spotbugs Plugin
  Java LGPL-2.1 42 1 0 0 Updated Dec 16, 2019

• hackfest-deserialization-workshop
  0 4 0 0 Updated Nov 2, 2019

• dtd-finder

  List DTDs and generate XXE payloads using those local DTDs.
  Kotlin 38 190 0 0 Updated Oct 24, 2019

• terraform-inventory

  Forked from adammck/terraform-inventory

  Terraform State → Ansible Dynamic Inventory
  Go MIT 252 0 0 0 Updated Oct 1, 2019

• freshonions-torscraper Archived

  Forked from dirtyfilthy/freshonions-torscraper

  Fresh Onions is an open source TOR spider / hidden service onion crawler
  Python AGPL-3.0 115 73 6 0 Updated Sep 26, 2019

• blackhat-arsenal-tools

  Forked from toolswatch/blackhat-arsenal-tools

  Official Black Hat Arsenal Security Tools Repository
  GPL-3.0 821 1 0 0 Updated Aug 6, 2019

• bettercap

  Forked from bettercap/bettercap

  The Swiss Army knife for 802.11, BLE and Ethernet networks reconnaissance and MITM attacks.
  Go GPL-3.0 785 3 0 0 Updated Aug 5, 2019

• caplets

  Fork of caplets with RDP proxy caplet
  JavaScript 0 2 0 0 Updated Aug 2, 2019

• burp-fuzzy-encoding-generator

  Quickly test various encoding for a given value in Burp Intruder

  encoding extension burp pentest intruder
  Kotlin 2 1 0 0 Updated Jul 30, 2019

• CredSniper

  Forked from ustayready/CredSniper

  CredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens.
  HTML Apache-2.0 212 0 0 0 Updated Jul 25, 2019

• Serpico

  Forked from SerpicoProject/Serpico

  SimplE RePort wrIting and COllaboration tool
  JavaScript 326 0 0 0 Updated Jul 5, 2019

• SprayingToolkit

  Forked from byt3bl33d3r/SprayingToolkit

  Scripts to make password spraying attacks against Lync/S4B & OWA a lot quicker, less painful and more efficient
  Python GPL-3.0 137 0 0 0 Updated Jun 27, 2019

• php7-opcache-override

  Security-related PHP7 OPcache abuse tools and demo

  php7 poc vulnerability opcache
  Python MIT 65 223 1 0 Updated Mar 20, 2019