bishopfox Goto Github PK

.github

Bishop Fox Engineering

action-automatic-releases

READONLY: Auto-generated mirror for https://github.com/marvinpinto/actions/tree/master/packages/automatic-releases

action-gh-release

📦 :octocat: GitHub Action for creating GitHub Releases

action-zip

A GitHub action used to zip file contents

anti-anti-automation

Anti-Anti-Automation Framework

asminject

Heavily-modified fork of David Buchanan's dlinject project. Injects arbitrary assembly (or precompiled binary) payloads directly into x86-64, x86, and ARM32 Linux processes without the use of ptrace by accessing /proc/<pid>/mem. Useful for certain post-exploitation scenarios, recovering content from process memory, etc..

aws-eks-accelerator-for-terraform

The AWS EKS Accelerator for Terraform is a framework designed to help deploy and operate secure multi-account, multi-region AWS environments. The power of the solution is the configuration file which enables the users to provide a unique terraform state for each cluster and manage multiple clusters from one repository. This code base allows users to deploy EKS add-ons using Helm charts.

aws-signing

CLI that allows user to submit http requests using AWS request signing

aws_seeker

awsservicemap

Go module that returns supported regions for a service or supported services for a region

badpods

A collection of manifests that will create pods with elevated privileges.

bfdecrypt

Utility to decrypt App Store apps on jailbroken iOS 11.x

bfinject

Dylib injection for iOS 11.0 - 11.1.2 with LiberiOS and Electra jailbreaks

bigip-scanner

Determine the running software version of a remote F5 BIG-IP management interface.

burpcage

ca-clone

Scripts to clone CA certificates for use in HTTPS client attacks.

cloudfox

Automating situational awareness for cloud penetration tests.

cloudfoxable

Create your own vulnerable by design AWS penetration testing playground

coldfusion-10-11-xss

Proof of Concept code for CVE-2015-0345 (APSB15-07)

cve-2016-1764

Recovery of Plaintext iMessage Data Without Breaking Crypto

cve-2021-35211

cve-2022-22274_cve-2023-0656

cve-2023-27997-check

Safely detect whether a FortiGate SSL VPN instance is vulnerable to CVE-2023-27997 based on response timing

cve-2023-3519

RCE exploit for CVE-2023-3519

cve-2024-21762-check

Safely detect whether a FortiGate SSL VPN is vulnerable to CVE-2024-21762

cyberdic

An auxiliary spellcheck dictionary that corresponds with the Bishop Fox Cybersecurity Style Guide

deephack

PoC code from DEF CON 25 presentation

docker-selenium

Docker images for the Selenium Grid Server

dufflebag

Search exposed EBS volumes for secrets

eyeballer

Convolutional neural network for analyzing pentest screenshots