NCC Group Plc

ScoutSuite

Multi-Cloud Security Auditing Tool

sobelow

Security-focused static analysis for the Phoenix Framework

PMapper

A tool for quickly evaluating IAM permissions in AWS.

singularity

A DNS rebinding attack framework.

exploit_mitigations

Knowledge base of exploit mitigations available across numerous operating systems, architectures and applications and versions.

Sniffle

A sniffer for Bluetooth 5 and 4.x LE

fuzzowski

the Network Protocol Fuzzer that we will want to use.

aws-inventory

Discover resources created in an AWS account.

LoggerPlusPlus

Advanced Burp Suite Logging Extension

sadcloud

A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure

VCG

VisualCodeGrepper - Code security scanning tool.

blackboxprotobuf

Blackbox protobuf is a Burp Suite extension for decoding and modifying arbitrary protobuf messages without the protobuf type definition.

autochrome

This tool downloads, installs, and configures a shiny new copy of Chromium.

idahunt

idahunt is a framework to analyze binaries with IDA Pro and hunt for things in IDA Pro

Cartographer

Code Coverage Exploration Plugin for Ghidra

SusanRTTI

Another RTTI Parsing IDA plugin

keimpx

Check for valid credentials across a network over SMB

typofinder

A finder of domain typos showing country of IP address

TriforceLinuxSyscallFuzzer

A linux system call fuzzer using TriforceAFL

libslub

SCOMDecrypt

SCOMDecrypt is a tool to decrypt stored RunAs credentials from SCOM servers

hashcrack

Guesses hash types, picks some sensible dictionaries and rules for hashcat

ghostrings

Ghidra scripts for recovering string definitions in Go binaries

PS2

A port scanner written purely in PowerShell.

kubetcd

Post-exploit a compromised etcd, gain persistence and remote shell to nodes.

ConscryptTrustUserCerts

pasta-curves

Provides the Pasta curves: Pallas, Vesta and their field elements Fp and Fq.

detaped

Detaped is a Python disassembler and decompiler for Duktape. The intended use is for source code review and analysis in situations where you only have the compiled Duktape bytecode binary, such as in a black-box assessment.

android_demystification_toolbox

ADT is a toolset designed to help model application behavior, research and test security vulnerabilities, and facilitate reversing hostile code.

SecretScrub