F-Secure LABS

Repositories

• awspx

  A graph-based tool for visualizing effective access and resource relationships in AWS environments.

  aws graph-theory pentesting aws-security
  Python GPL-3.0 51 423 1 1 Updated Jul 9, 2020

• incognito

  One Token To Rule Them All https://labs.mwrinfosecurity.com/blog/incognito-v2-0-released/
  C 8 33 0 1 Updated Jul 9, 2020

• leonidas

  Automated Attack Simulation in the Cloud, complete with detection use cases.
  Python MIT 11 133 2 0 Updated Jul 5, 2020

• captcha22

  CAPTCHA22 is a toolset for building, and training, CAPTCHA cracking models using neural networks.
  Python MIT 22 139 1 0 Updated Jul 4, 2020

• fdpasser

  Example of passing file descriptors into a container to perform a privilege escalation on the host
  C 1 5 0 0 Updated Jul 3, 2020

• needle

  The iOS Security Testing Framework

  python security ios mobile needle pentesting
  Python 262 1,062 24 2 Updated Jun 23, 2020

• C3

  Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits.
  C++ 117 609 1 2 Updated Jun 8, 2020

• SharpGPOAbuse

  SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled by that GPO.
  C# 62 294 1 1 Updated May 28, 2020

• drozer

  The Leading Security Assessment Framework for Android.

  android java security mobile pentesting drozer mwr
  Python 588 2,222 54 6 Updated May 8, 2020

• Ninjasploit

  A meterpreter extension for applying hooks to avoid windows defender memory scans
  C 14 102 1 0 Updated Apr 27, 2020

• Jamf-Attack-Toolkit

  Suite of tools to facilitate attacks against the Jamf macOS management platform.
  Python 13 79 0 1 Updated Apr 22, 2020

• physmem2profit

  Physmem2profit can be used to create a minidump of a target hosts' LSASS process by analysing physical memory remotely

  windows security pentesting red-team credential-theft
  C# Apache-2.0 33 163 0 0 Updated Apr 14, 2020

• android-keystore-audit
  JavaScript 15 81 1 0 Updated Apr 6, 2020

• Jandroid
  Python BSD-3-Clause 43 233 5 0 Updated Mar 3, 2020

• z3_and_angr_binary_analysis_workshop

  Code and exercises for a workshop on z3 and angr

  workshop reverse-engineering z3 binary-analysis smt-solver angr
  Python 22 127 1 1 Updated Feb 26, 2020

• SharpClipHistory

  SharpClipHistory is a .NET application written in C# that can be used to read the contents of a user's clipboard history in Windows 10 starting from the 1809 Build.
  C# 22 93 0 1 Updated Jan 23, 2020

• keywe-tooling

  Tools that can be used to interact with the KeyWe Smart Lock device.
  Python 3 4 0 0 Updated Dec 10, 2019

• Cisco-UCM-SQLi-Scripts

  Scripts that can be used to exploit CVE-2019-15972 which was an Authenticated SQLi issue in Cisco Unified Call Manager (UCM).
  Python 4 4 0 0 Updated Nov 20, 2019

• timeinator

  Timeinator is an extension for Burp Suite that can be used to perform timing attacks over an unreliable network such as the internet.
  Python 7 10 1 0 Updated Nov 10, 2019

• dref

  DNS Rebinding Exploitation Framework

  iot hacking pentesting iot-security red-team web-hacking iot-security-testing
  JavaScript 49 377 2 0 Updated Oct 27, 2019

• LinuxCatScale

  Incident Response collection and processing scripts with automated reporting scripts
  Shell 5 7 0 0 Updated Oct 7, 2019

• SharpGPO-RemoteAccessPolicies

  A C# tool for enumerating remote access policies through group policy.
  C# 19 62 0 0 Updated Apr 18, 2019

• 3d-accelerated-exploitation

  3D Accelerated Exploitation
  C 6 45 0 0 Updated Feb 22, 2019

• Azurite

  Enumeration and reconnaissance activities in the Microsoft Azure Cloud.
  PowerShell BSD-3-Clause 63 195 5 1 Updated Feb 20, 2019

• ViridianFuzzer

  Kernel driver to fuzz Hyper-V hypercalls
  C++ 33 95 0 0 Updated Feb 15, 2019

• XRulez

  A command line tool for creating malicious outlook rules
  C 45 120 0 0 Updated Dec 11, 2018

• KernelFuzzer

  Cross Platform Kernel Fuzzer Framework
  C BSD-3-Clause 146 383 1 0 Updated Oct 11, 2018

• wePWNise

  WePWNise generates architecture independent VBA code to be used in Office documents or templates and automates bypassing application control and exploit mitigation software.
  Python BSD-3-Clause 92 293 1 0 Updated Aug 27, 2018

• win_driver_plugin

  A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers.
  Python BSD-3-Clause 104 330 1 0 Updated Aug 22, 2018

• drozer-modules

  android java security mobile pentesting drozer mwr
  Python 60 120 3 2 Updated May 24, 2018