F-Secure LABS

Repositories

• dref

  DNS Rebinding Exploitation Framework

  iot hacking pentesting iot-security red-team web-hacking iot-security-testing
  JavaScript 57 395 2 0 Updated Oct 1, 2020

• Re-Desk-v2.3-Vulnerabilities
  Python 0 0 0 0 Updated Sep 28, 2020

• C3

  Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits.
  C++ 129 645 2 3 Updated Sep 18, 2020

• awspx

  A graph-based tool for visualizing effective access and resource relationships in AWS environments.

  aws graph-theory pentesting aws-security
  Python GPL-3.0 53 471 1 0 Updated Sep 18, 2020

• captcha22

  CAPTCHA22 is a toolset for building, and training, CAPTCHA cracking models using neural networks.
  Python MIT 27 167 1 0 Updated Sep 8, 2020

• N1QLMap

  The tool exfiltrates data from Couchbase database by exploiting N1QL injection vulnerabilities.
  Python 2 16 0 0 Updated Sep 2, 2020

• peas

  PEAS is a Python 2 library and command line application for running commands on an ActiveSync server e.g. Microsoft Exchange.
  Python 30 90 3 1 Updated Aug 25, 2020

• Ninjasploit

  A meterpreter extension for applying hooks to avoid windows defender memory scans
  C 20 114 1 1 Updated Aug 13, 2020

• leonidas

  Automated Attack Simulation in the Cloud, complete with detection use cases.
  Python MIT 22 193 2 0 Updated Aug 6, 2020

• timeinator

  Timeinator is an extension for Burp Suite that can be used to perform timing attacks over an unreliable network such as the internet.
  Python 10 11 0 0 Updated Jul 24, 2020

• incognito

  One Token To Rule Them All https://labs.mwrinfosecurity.com/blog/incognito-v2-0-released/
  C 10 35 1 1 Updated Jul 9, 2020

• fdpasser

  Example of passing file descriptors into a container to perform a privilege escalation on the host
  C 2 9 0 0 Updated Jul 3, 2020

• needle

  The iOS Security Testing Framework

  python security ios mobile needle pentesting
  Python 266 1,082 24 2 Updated Jun 23, 2020

• SharpGPOAbuse

  SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled by that GPO.
  C# 60 307 1 1 Updated May 27, 2020

• drozer

  The Leading Security Assessment Framework for Android.

  android java security mobile pentesting drozer mwr
  Python 604 2,309 56 6 Updated May 8, 2020

• Jamf-Attack-Toolkit

  Suite of tools to facilitate attacks against the Jamf macOS management platform.
  Python 17 92 0 1 Updated Apr 22, 2020

• physmem2profit

  Physmem2profit can be used to create a minidump of a target hosts' LSASS process by analysing physical memory remotely

  windows security pentesting red-team credential-theft
  C# Apache-2.0 36 186 1 0 Updated Apr 14, 2020

• android-keystore-audit
  JavaScript 18 89 1 0 Updated Apr 6, 2020

• Jandroid
  Python BSD-3-Clause 49 244 5 0 Updated Mar 3, 2020

• z3_and_angr_binary_analysis_workshop

  Code and exercises for a workshop on z3 and angr

  workshop reverse-engineering z3 binary-analysis smt-solver angr
  Python 22 133 1 1 Updated Feb 26, 2020

• SharpClipHistory

  SharpClipHistory is a .NET application written in C# that can be used to read the contents of a user's clipboard history in Windows 10 starting from the 1809 Build.
  C# 22 100 0 1 Updated Jan 23, 2020

• keywe-tooling

  Tools that can be used to interact with the KeyWe Smart Lock device.
  Python 3 4 0 0 Updated Dec 10, 2019

• Cisco-UCM-SQLi-Scripts

  Scripts that can be used to exploit CVE-2019-15972 which was an Authenticated SQLi issue in Cisco Unified Call Manager (UCM).
  Python 5 4 0 0 Updated Nov 20, 2019

• LinuxCatScale

  Incident Response collection and processing scripts with automated reporting scripts
  Shell 5 7 0 0 Updated Oct 7, 2019

• SharpGPO-RemoteAccessPolicies

  A C# tool for enumerating remote access policies through group policy.
  C# 23 65 0 0 Updated Apr 18, 2019

• 3d-accelerated-exploitation

  3D Accelerated Exploitation
  C 6 45 0 0 Updated Feb 22, 2019

• Azurite

  Enumeration and reconnaissance activities in the Microsoft Azure Cloud.
  PowerShell BSD-3-Clause 64 198 5 1 Updated Feb 20, 2019

• ViridianFuzzer

  Kernel driver to fuzz Hyper-V hypercalls
  C++ 34 100 0 0 Updated Feb 15, 2019

• XRulez

  A command line tool for creating malicious outlook rules
  C 45 124 0 0 Updated Dec 11, 2018

• KernelFuzzer

  Cross Platform Kernel Fuzzer Framework
  C BSD-3-Clause 148 388 1 0 Updated Oct 11, 2018