NCC Group Plc

ScoutSuite

Multi-Cloud Security Auditing Tool

sobelow

Security-focused static analysis for the Phoenix Framework

PMapper

A tool for quickly evaluating IAM permissions in AWS.

singularity

A DNS rebinding attack framework.

exploit_mitigations

Knowledge base of exploit mitigations available across numerous operating systems, architectures and applications and versions.

Sniffle

A sniffer for Bluetooth 5 and 4.x LE

fuzzowski

the Network Protocol Fuzzer that we will want to use.

aws-inventory

Discover resources created in an AWS account.

sadcloud

A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure

LoggerPlusPlus

Advanced Burp Suite Logging Extension

blackboxprotobuf

Blackbox Protobuf is a set of tools for working with encoded Protocol Buffers (protobuf) without the matching protobuf definition.

autochrome

This tool downloads, installs, and configures a shiny new copy of Chromium.

idahunt

idahunt is a framework to analyze binaries with IDA Pro and hunt for things in IDA Pro

Cartographer

Code Coverage Exploration Plugin for Ghidra

keimpx

Check for valid credentials across a network over SMB

typofinder

A finder of domain typos showing country of IP address

TriforceLinuxSyscallFuzzer

A linux system call fuzzer using TriforceAFL

libslub

SCOMDecrypt

SCOMDecrypt is a tool to decrypt stored RunAs credentials from SCOM servers

ghostrings

Ghidra scripts for recovering string definitions in Go binaries

hashcrack

Guesses hash types, picks some sensible dictionaries and rules for hashcat

PS2

A port scanner written purely in PowerShell.

ConscryptTrustUserCerts

kubetcd

Post-exploit a compromised etcd, gain persistence and remote shell to nodes.

ghidra-nanomips

nanoMIPS module for Ghidra

mtk_bp

MediaTek BP firmware tools

pasta-curves

Provides the Pasta curves: Pallas, Vesta and their field elements Fp and Fq.

android_demystification_toolbox

ADT is a toolset designed to help model application behavior, research and test security vulnerabilities, and facilitate reversing hostile code.

SecretScrub

chipsec

Platform Security Assessment Framework