GoSecure

Repositories

• pyrdp

  RDP man-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact

  honeypot rdp pentest hacktoberfest
  Python GPL-3.0 105 481 19 (5 issues need help) 6 Updated Oct 14, 2020

• dtd-finder

  List DTDs and generate XXE payloads using those local DTDs.
  Kotlin 58 291 0 0 Updated Oct 2, 2020

• ansible-ssh

  Forked from selivan/ansible-ssh

  Script to connect to managed hosts using Ansible inventory and config.
  Shell 7 0 0 0 Updated Oct 2, 2020

• java-hostname-verification-poc
  0 2 0 0 Updated Sep 30, 2020

• pywsus
  Python 7 50 1 0 Updated Sep 14, 2020

• unicode-pentester-cheatsheet

  An easy to navigate list of unicode characters that have risky transformations 💥
  HTML 0 1 0 0 Updated Aug 6, 2020

• frida-xamarin-unpin

  A Frida script to bypass Xamarin certificate pinning implementations
  C# 18 26 2 0 Updated Aug 4, 2020

• security-cheat-sheet

  Minimalist cheat sheet for developpers to write secure code

  security dotnet xss cheatsheet
  HTML 6 35 0 0 Updated Jul 17, 2020

• goinsecure-deserialization

  Accompanying material needed for the workshop
  Java 1 4 0 0 Updated Jul 15, 2020

• LOLBAS

  Forked from LOLBAS-Project/LOLBAS

  Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
  XSLT 405 0 0 0 Updated Jul 3, 2020

• presentations

  Material from presentations done by GoSecure researchers

  security research slides reveal-js presentations
  HTML 9 12 0 0 Updated May 21, 2020

• advanced-binary-analysis

  Materials for the Binary Analysis Workshop presented at NorthSec 2020
  HTML 11 16 0 0 Updated May 21, 2020

• malboxes

  Builds malware analysis Windows VMs so that you don't have to.

  vagrant packer virtual-machine python3 malware-analysis malware-research
  Python GPL-3.0 124 864 24 (6 issues need help) 2 Updated May 21, 2020

• CrackMapExec

  Forked from byt3bl33d3r/CrackMapExec

  A swiss army knife for pentesting networks
  Python BSD-2-Clause 989 2 0 0 Updated May 21, 2020

• csp-auditor

  Burp and ZAP plugin to analyse Content-Security-Policy headers or generate template CSP configuration from crawling a Website

  http security csp zap burp burp-plugin zap-plugin
  Java 29 115 1 0 Updated Apr 29, 2020

• DLLPasswordFilterImplant

  DLL Password Filter Implant with Exfiltration Capabilities

  credentials active-directory password pentest
  C MIT 16 100 6 (1 issue needs help) 0 Updated Feb 24, 2020

• reveal.js

  Forked from hakimel/reveal.js

  Added our own themes to reveal.js
  CSS MIT 15,099 0 0 0 Updated Feb 14, 2020

• sysmon-config

  Forked from SwiftOnSecurity/sysmon-config

  Sysmon configuration file template with default high-quality event tracing
  870 0 0 0 Updated Feb 5, 2020

• frida-mono-api

  Forked from freehuntx/frida-mono-api

  All the mono c exports, ready to be used in frida!
  JavaScript MIT 13 1 0 0 Updated Jan 30, 2020

• peas

  Forked from FSecureLABS/peas

  PEAS is a Python 2 library and command line application for running commands on an ActiveSync server e.g. Microsoft Exchange.
  Python 30 1 0 0 Updated Jan 7, 2020

• impacket

  Forked from SecureAuthCorp/impacket

  Impacket is a collection of Python classes for working with network protocols.
  Python 1,658 0 0 0 Updated Jan 2, 2020

• findbugs-idea

  Forked from scanban/findbugs-idea

  IntelliJ Spotbugs Plugin
  Java LGPL-2.1 45 1 0 0 Updated Dec 16, 2019

• hackfest-deserialization-workshop
  2 4 0 0 Updated Nov 2, 2019

• terraform-inventory

  Forked from adammck/terraform-inventory

  Terraform State → Ansible Dynamic Inventory
  Go MIT 252 0 0 0 Updated Oct 1, 2019

• freshonions-torscraper Archived

  Forked from dirtyfilthy/freshonions-torscraper

  Fresh Onions is an open source TOR spider / hidden service onion crawler
  Python AGPL-3.0 120 75 6 0 Updated Sep 26, 2019

• blackhat-arsenal-tools

  Forked from toolswatch/blackhat-arsenal-tools

  Official Black Hat Arsenal Security Tools Repository
  GPL-3.0 833 1 0 0 Updated Aug 6, 2019

• bettercap

  Forked from bettercap/bettercap

  The Swiss Army knife for 802.11, BLE and Ethernet networks reconnaissance and MITM attacks.
  Go GPL-3.0 818 3 0 0 Updated Aug 5, 2019

• caplets

  Fork of caplets with RDP proxy caplet
  JavaScript 0 2 0 0 Updated Aug 2, 2019

• burp-fuzzy-encoding-generator

  Quickly test various encoding for a given value in Burp Intruder

  encoding extension burp pentest intruder
  Kotlin 2 2 0 0 Updated Jul 30, 2019

• CredSniper

  Forked from ustayready/CredSniper

  CredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens.
  HTML Apache-2.0 215 0 0 0 Updated Jul 25, 2019