nccgroup Goto Github PK

freddy

Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans

freebsd-kernel-module-rust

frisbeelite

A GUI-based USB device fuzzer

fuzzowski

the Network Protocol Fuzzer that we will want to use.

g-scout

Google Cloud Platform Security Tool

ghostrings

Ghidra scripts for recovering string definitions in Go binaries

gists

NCC Group gists

gitpwnd

GitPwnd is a network penetration tool that lets you use a git repo for command and control of compromised machines

glasgo

Go static analysis tool that checks for security issues using an AST.

go-pillage-registries

Pentester-focused Docker registry tool to enumerate and pull images

goatcasino

This is an intentionally vulnerable smart contract truffle deployment aimed at allowing those interested in smart contract security to exploit a wide variety of issues in a safe environment.

googleauthenticator

PHP class to generate and verify Google Authenticator 2-factor authentication

grepify

Grepify the GUI Regex Text Scanner for Code Reviewers

grepifyprofiles

Code scanning regex profiles

gtfoblookup

Offline command line lookup utility for GTFOBins (https://github.com/GTFOBins/GTFOBins.github.io), LOLBAS (https://github.com/LOLBAS-Project/LOLBAS), WADComs (https://wadcoms.github.io), and HijackLibs (https://hijacklibs.net/).

hashcrack

Guesses hash types, picks some sensible dictionaries and rules for hashcat

hodor

Hodor! Fuzzer..

holepuncher

Holepuncher, A wrapper script to open ports in iptables and start a listener.

hostresolver

A Windows application to help out with external infrastructure scans.

house

A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.

httpsignatures

A Burp Suite extension implementing the Signing HTTP Messages draft-ietf-httpbis-message-signatures-01 draft.

hwsecuritybingo

Are you auditing an embedded device? Why not play Hardware Security Bingo to add to the fun?

icpin

An Integrity-Check Monitoring Pintool

idahunt

idahunt is a framework to analyze binaries with IDA Pro and hunt for things in IDA Pro

impossibletravelloganalysis

Basic log analysis tool to detect impossible travel via IP address geographic information

insject

insject is a tool for poking at containers. It enables you to run an arbitrary command in a container or any mix of Linux namespaces.

iodide

The Cisco IOS Debugger and Integrated Disassembler Environment

ip-reputation-snort-rule-generator

A tool to generate Snort rules based on public IP reputation data

ja3_outlier

Incremental Machine Leaning by example - Detecting suspicious activity in real time with Zeek data streams, River and JA3 hashes

jdser-ngng

A Burp Extender plugin, that will deserialized java objects and encode them in XML using the Xtream library.