Repositories list

• scoutmerge

  Public
  ScoutMerge is an extension for ScoutSuite allowing you to easily display results of hundreds of projects audits into a single text file.

  Python

  •

  GNU General Public License v2.0

  •0•0•0•0•Updated Aug 20, 2024Aug 20, 2024

• pyrdp

  Public
  RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact

  securityhoneypotmitm+ 4rdppentesthacktoberfestpyrdp

  Python

  •

  GNU General Public License v3.0

  •245•1.5k•45•10•Updated Jun 12, 2024Jun 12, 2024

• fq-pyrdp

  Public
  fq format for parsing PyRDP replays

  Go

  •

  MIT License

  •1•4•1•0•Updated Jun 4, 2024Jun 4, 2024

• dtd-finder

  Public
  List DTDs and generate XXE payloads using those local DTDs.

  securityhacktoberfestdtd+ 1xxe

  Kotlin

  •106•608•0•1•Updated Feb 21, 2024Feb 21, 2024

• notebooks

  Public
  Cybersecurity Research Jupyter Notebooks for the Community

  Jupyter Notebook

  •

  MIT License

  •0•1•0•0•Updated Jan 30, 2024Jan 30, 2024

• csp-evaluator

  Public
  TypeScript

  •

  Apache License 2.0

  •46•0•0•0•Updated Jan 8, 2024Jan 8, 2024

• jupyterhub-workshop-environment

  Public
  Opinionated JupyterHub deployment for workshops relying on GitHub for Authentication

  workshopjupyter-notebookjupyterhub+ 1jupyterlab

  HCL

  •

  MIT License

  •0•0•0•0•Updated Nov 13, 2023Nov 13, 2023

• jupyterhub-workshop-environment-legacy

  Public archive
  Opinionated JupyterHub deployment for workshops relying on GitHub for Authentication

  workshopjupyter-notebookjupyterhub+ 2cybersecurityjupyterlab

  Shell

  •0•0•0•0•Updated Nov 8, 2023Nov 8, 2023

• presentations

  Public
  Material from presentations done by GoSecure researchers

  securityresearchslides+ 2reveal-jspresentations

  HTML

  •15•33•0•0•Updated Oct 10, 2023Oct 10, 2023

• malware-ioc

  Public
  Indicators of Compromise (IOCs) for malware we have researched

  YARA

  •

  Other

  •2•10•0•0•Updated Aug 8, 2023Aug 8, 2023

• goinsecure-deserialization

  Public
  Accompanying material needed for the workshop

  Java

  •6•11•0•1•Updated Jun 14, 2023Jun 14, 2023

• xxe-workshop

  Public
  Workshop given at Hack in Paris 2019

  JavaScript

  •38•121•3•1•Updated Jun 8, 2023Jun 8, 2023

• Nimcrypt2

  Public
  .NET, PE, & Raw Shellcode Packer/Loader Written in Nim

  Nim

  •

  GNU General Public License v3.0

  •120•2•0•0•Updated Jan 20, 2023Jan 20, 2023

• request-smuggling-workshop

  Public
  Python

  •11•23•1•0•Updated Jan 10, 2023Jan 10, 2023

• template-injection-workshop

  Public
  Workshop on Template Injection (6 exercises) covering Twig, Jinja2, Tornado, Velocity and Freemaker engines.

  templatetwigjinja2+ 7velocityinjectiontornadofreemarkercodelabsappsecvulnerable-web-app

  CSS

  •33•120•1•0•Updated Jan 10, 2023Jan 10, 2023

• frida-xamarin-unpin

  Public
  A Frida script to bypass Xamarin certificate pinning implementations

  C#

  •27•66•4•1•Updated Jan 6, 2023Jan 6, 2023

• php7-opcache-override

  Public
  Security-related PHP7 OPcache abuse tools and demo

  php7pocvulnerability+ 1opcache

  Python

  •

  MIT License

  •74•309•1•0•Updated Jan 2, 2023Jan 2, 2023

• hack400tool

  Public
  hack400tool

  Java

  •23•2•0•0•Updated Dec 16, 2022Dec 16, 2022

• pywsus

  Public
  Standalone implementation of a part of the WSUS spec. Built for offensive security purposes.

  attackwsushacktoberfest+ 1python

  Python

  •

  MIT License

  •44•290•5•2•Updated Nov 11, 2022Nov 11, 2022

• ldap-scanner

  Public
  Checks for signature requirements over LDAP

  ldaphacktoberfestntlm-relay

  Python

  •7•92•1•0•Updated Oct 11, 2022Oct 11, 2022

• Spray365

  Public
  Spray365 makes spraying Microsoft accounts (Office 365 / Azure AD) easy through its customizable two-step password spraying approach. The built-in execution plan features options that attempt to bypass Azure Smart Lockout and insecure conditional access policies.

  Python

  •

  MIT License

  •57•1•0•0•Updated Sep 16, 2022Sep 16, 2022

• pwndoc

  Public
  Pentest Report Generator

  JavaScript

  •

  MIT License

  •424•2•0•0•Updated Sep 8, 2022Sep 8, 2022

• missing-security-controls

  Public
  HTML

  •0•1•0•0•Updated Sep 6, 2022Sep 6, 2022

• zap-autodecode-view

  Public
  ZAP plugin demonstrating custom view for WebSocket messages.

  Kotlin

  •

  MIT License

  •2•13•2•0•Updated May 4, 2022May 4, 2022

• unicode-pentester-cheatsheet

  Public
  An easy to navigate list of unicode characters that have risky transformations 💥

  HTML

  •7•22•0•0•Updated Mar 22, 2022Mar 22, 2022

• burp-fuzzy-encoding-generator

  Public
  Quickly test various encoding for a given value in Burp Intruder

  extensionburppentest+ 2encodingintruder

  Kotlin

  •5•6•0•0•Updated Feb 1, 2022Feb 1, 2022

• gosecure.github.io

  Public
  HTML

  •0•1•0•0•Updated Jan 20, 2022Jan 20, 2022

• peas

  Public
  PEAS is a Python 2 library and command line application for running commands on an ActiveSync server e.g. Microsoft Exchange.

  Python

  •

  Other

  •53•2•0•0•Updated Jan 10, 2022Jan 10, 2022

• ScoutSuite

  Public
  Multi-Cloud Security Auditing Tool

  Python

  •

  GNU General Public License v2.0

  •1.1k•1•0•0•Updated Dec 10, 2021Dec 10, 2021

• linkedin-osint

  Public
  A simple proof of concept that demonstrate how emails can easily be tie to LinkedIn profile

  Python

  •

  MIT License

  •4•39•1•0•Updated Oct 26, 2021Oct 26, 2021