Repositories list

• SteppingStones

  Public
  A Red Team Activity Hub

  bloodhoundrecordingcobalt-strike+ 2red-teamcracking-hashes

  Python

  •

  Apache License 2.0

  •28•183•5•0•Updated Jan 24, 2025Jan 24, 2025

• singularity

  Public
  A DNS rebinding attack framework.

  dnsiotattack+ 2dns-rebindingvulnerability

  JavaScript

  •

  MIT License

  •143•1.1k•6•2•Updated Jan 22, 2025Jan 22, 2025

• Sniffle

  Public
  A sniffer for Bluetooth 5 and 4.x LE

  Python

  •

  GNU General Public License v3.0

  •132•918•19•2•Updated Jan 11, 2025Jan 11, 2025

• blackboxprotobuf

  Public
  Blackbox Protobuf is a set of tools for working with encoded Protocol Buffers (protobuf) without the matching protobuf definition.

  protobufburp

  Python

  •

  MIT License

  •92•556•2•0•Updated Nov 27, 2024Nov 27, 2024

• chipsec

  Public
  Platform Security Assessment Framework

  Python

  •

  GNU General Public License v2.0

  •588•4•0•0•Updated Nov 24, 2024Nov 24, 2024

• cryptopals-py

  Public
  Python solutions to the Cryptopals Crypto Challenges

  pythoncryptographycryptopals

  Python

  •0•6•0•0•Updated Nov 20, 2024Nov 20, 2024

• ScoutSuite

  Public
  Multi-Cloud Security Auditing Tool

  awssecurityauditing+ 3cloudazuregcp

  Python

  •

  GNU General Public License v2.0

  •1.1k•6.9k•221•40•Updated Nov 19, 2024Nov 19, 2024

• ghidra-nanomips

  Public
  nanoMIPS module for Ghidra

  reverse-engineeringghidraghidra-plugin+ 2ghidra-extensionnanomips

  Python

  •

  GNU General Public License v3.0

  •8•44•0•0•Updated Nov 18, 2024Nov 18, 2024

• ghostrings

  Public
  Ghidra scripts for recovering string definitions in Go binaries

  gogolangreverse-engineering+ 3ghidraghidra-extensionghidra-scripts

  Java

  •

  GNU General Public License v3.0

  •9•106•0•0•Updated Nov 12, 2024Nov 12, 2024

• nmap

  Public
  Nmap - the Network Mapper. Github mirror of official SVN repository.

  C

  •

  Other

  •2.4k•1•0•0•Updated Oct 24, 2024Oct 24, 2024

• test_avb_key

  Public
  Python

  •1•2•0•0•Updated Sep 12, 2024Sep 12, 2024

• sobelow

  Public
  Security-focused static analysis for the Phoenix Framework

  securityelixirstatic-analysis+ 1phoenix-framework

  Elixir

  •

  Apache License 2.0

  •98•1.7k•28•8•Updated Aug 20, 2024Aug 20, 2024

• PMapper

  Public
  A tool for quickly evaluating IAM permissions in AWS.

  pythonawsiam+ 2botocorecloudsecurity

  Python

  •

  GNU Affero General Public License v3.0

  •175•1.4k•27•6•Updated Aug 2, 2024Aug 2, 2024

• Cartographer

  Public
  Code Coverage Exploration Plugin for Ghidra

  Java

  •

  Apache License 2.0

  •28•337•2•2•Updated Jul 19, 2024Jul 19, 2024

• cloud_ip_ranges

  Public
  Identify IP addresses owned by public cloud providers

  cloudosint

  Python

  •

  MIT License

  •29•115•4•2•Updated Jul 2, 2024Jul 2, 2024

• Berserko

  Public
  Burp Suite extension to perform Kerberos authentication

  Java

  •

  GNU Affero General Public License v3.0

  •15•104•9•0•Updated Jun 28, 2024Jun 28, 2024

• phantap

  Public
  Phantom Tap (PhanTap) - an ‘invisible’ network tap aimed at red teams

  C

  •

  GNU General Public License v3.0

  •79•595•6•0•Updated Jun 2, 2024Jun 2, 2024

• LoggerPlusPlus

  Public
  Advanced Burp Suite Logging Extension

  Java

  •

  GNU Affero General Public License v3.0

  •161•637•28•4•Updated May 31, 2024May 31, 2024

• mtk_bp

  Public
  MediaTek BP firmware tools

  mediatekreverse-engineeringbaseband

  Python

  •

  GNU General Public License v3.0

  •10•49•0•0•Updated May 30, 2024May 30, 2024

• exploit_mitigations

  Public
  Knowledge base of exploit mitigations available across numerous operating systems, architectures and applications and versions.

  MIT License

  •100•885•1•0•Updated May 20, 2024May 20, 2024

• manim-cranim

  Public
  Toolkit for creating cryptographic figures and videos.

  cryptographycomputer-science-educationmanim

  Python

  •

  MIT License

  •2•30•0•0•Updated May 17, 2024May 17, 2024

• fips203

  Public
  Pure Rust implementation of (draft) FIPS 203 Module-Lattice-based Key-Encapsulation Mechanism Standard for server, desktop, browser and embedded applications.

  Rust

  •

  Apache License 2.0

  •0•15•0•0•Updated May 15, 2024May 15, 2024

• kubetcd

  Public
  Post-exploit a compromised etcd, gain persistence and remote shell to nodes.

  kubernetesetcd

  Go

  •

  Apache License 2.0

  •7•73•1•2•Updated May 7, 2024May 7, 2024

• aws-inventory

  Public
  Discover resources created in an AWS account.

  reactpythonaws

  Python

  •

  Apache License 2.0

  •131•711•15•10•Updated Apr 5, 2024Apr 5, 2024

• autochrome

  Public
  This tool downloads, installs, and configures a shiny new copy of Chromium.

  HTML

  •

  Apache License 2.0

  •81•449•8•5•Updated Apr 3, 2024Apr 3, 2024

• android_demystification_toolbox

  Public
  ADT is a toolset designed to help model application behavior, research and test security vulnerabilities, and facilitate reversing hostile code.

  Python

  •

  Apache License 2.0

  •0•4•0•0•Updated Feb 28, 2024Feb 28, 2024

• TriforceLinuxSyscallFuzzer

  Public
  A linux system call fuzzer using TriforceAFL

  C

  •60•174•3•1•Updated Feb 28, 2024Feb 28, 2024

• libslub

  Public
  Python

  •

  MIT License

  •16•168•4•1•Updated Feb 22, 2024Feb 22, 2024

• fuzzowski

  Public
  the Network Protocol Fuzzer that we will want to use.

  Python

  •

  GNU General Public License v2.0

  •112•738•11•3•Updated Jan 29, 2024Jan 29, 2024

• keimpx

  Public
  Check for valid credentials across a network over SMB

  Python

  •

  Apache License 2.0

  •66•257•7•1•Updated Jan 5, 2024Jan 5, 2024