NCC Group Plc

tracy

A tool designed to assist with finding all sinks and sources of a web application and display these results in a digestible manner.

VCG

VisualCodeGrepper - Code security scanning tool.

wssip

Application for capturing, modifying and sending custom WebSocket data from client to server and vice versa.

scrying

A tool for collecting RDP, web and VNC screenshots all in one place

shocker

A tool to find and exploit servers vulnerable to Shellshock

GTFOBLookup

Offline command line lookup utility for GTFOBins (https://github.com/GTFOBins/GTFOBins.github.io), LOLBAS (https://github.com/LOLBAS-Project/LOLBAS), WADComs (https://wadcoms.github.io), and HijackLibs (https://hijacklibs.net/).

depthcharge

A U-Boot hacking toolkit for security researchers and tinkerers

BinProxy

BinProxy is a proxy for arbitrary TCP connections. You can define custom message formats using the BinData gem.

whalescan

Whalescan is a vulnerability scanner for Windows containers, which performs several benchmark checks, as well as checking for CVEs/vulnerable packages on the container

requests-racer

Small Python library that makes it easy to exploit race conditions in web apps with Requests.

gitpwnd

GitPwnd is a network penetration tool that lets you use a git repo for command and control of compromised machines

DroppedConnection

cq

ccs

web3-decoder

cloud_ip_ranges

Identify IP addresses owned by public cloud providers

raccoon

Salesforce object access auditor

jwt-reauth

cowcloud

MetadataPlus

A tool to use novel locations to extract metadata from Office documents.

freebsd-kernel-module-rust

Threat-Intelligence-Alerts

Welcome to the NCC Group Threat Intelligence Alert repo, here you will find the alerts which we have raised to our customers regarding intelligence we have identified relating to emerging threats. As part of our mission to make our society more secure we wanted to make these alerts visible to all.

rustproofing-linux

dapr

Driver Attack Platform for Linux

BurpImportSitemap

Import To Sitemap is a Burp Suite Extension to import wstalker CSV file or ZAP export file into Burp Sitemap

cryptopals-py

Python solutions to the Cryptopals Crypto Challenges

FastBTCParser

A somewhat fast bitcoin blockchain parser to extract stats and ordinals files

ataraxy

Collection of data and utility functions for forthcoming blog series on machine learning

reactor

Runs custom filters on Elasticsearch and alerts on matches

Custom-ROP-Chain