GoSecure

Repositories

• pyrdp

  RDP man-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
  Python GPL-3.0 94 440 24 (5 issues need help) 7 Updated Jul 17, 2020

• security-cheat-sheet

  Minimalist cheat sheet for developpers to write secure code

  security dotnet xss cheatsheet
  HTML 6 35 0 0 Updated Jul 17, 2020

• goinsecure-deserialization

  Accompanying material needed for the workshop
  Java 1 4 0 0 Updated Jul 15, 2020

• LOLBAS

  Forked from LOLBAS-Project/LOLBAS

  Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
  XSLT 355 0 0 0 Updated Jul 3, 2020

• presentations

  Material from presentations done by GoSecure researchers

  security research slides reveal-js presentations
  HTML 9 11 0 0 Updated May 21, 2020

• advanced-binary-analysis

  Materials for the Binary Analysis Workshop presented at NorthSec 2020
  HTML 10 14 0 0 Updated May 21, 2020

• malboxes

  Builds malware analysis Windows VMs so that you don't have to.

  vagrant packer virtual-machine python3 malware-analysis malware-research
  Python GPL-3.0 120 843 24 (6 issues need help) 2 Updated May 21, 2020

• CrackMapExec

  Forked from byt3bl33d3r/CrackMapExec

  A swiss army knife for pentesting networks
  Python BSD-2-Clause 942 2 0 0 Updated May 21, 2020

• csp-auditor

  Burp and ZAP plugin to analyse Content-Security-Policy headers or generate template CSP configuration from crawling a Website

  http security csp zap burp burp-plugin zap-plugin
  Java 28 110 1 0 Updated Apr 29, 2020

• frida-xamarin-unpin

  A Frida script to bypass Xamarin certificate pinning implementations
  C# 14 17 2 0 Updated Apr 7, 2020

• DLLPasswordFilterImplant

  DLL Password Filter Implant with Exfiltration Capabilities

  credentials active-directory password pentest
  C MIT 16 100 6 (1 issue needs help) 0 Updated Feb 24, 2020

• reveal.js

  Forked from hakimel/reveal.js

  Added our own themes to reveal.js
  CSS MIT 14,950 0 0 0 Updated Feb 14, 2020

• sysmon-config

  Forked from SwiftOnSecurity/sysmon-config

  Sysmon configuration file template with default high-quality event tracing
  818 0 0 0 Updated Feb 5, 2020

• frida-mono-api

  Forked from freehuntx/frida-mono-api

  All the mono c exports, ready to be used in frida!
  JavaScript MIT 12 1 0 0 Updated Jan 30, 2020

• peas

  Forked from FSecureLABS/peas

  PEAS is a Python 2 library and command line application for running commands on an ActiveSync server e.g. Microsoft Exchange.
  Python 21 0 0 0 Updated Jan 7, 2020

• impacket

  Forked from SecureAuthCorp/impacket

  Impacket is a collection of Python classes for working with network protocols.
  Python 1,525 0 0 0 Updated Jan 2, 2020

• findbugs-idea

  Forked from scanban/findbugs-idea

  IntelliJ Spotbugs Plugin
  Java LGPL-2.1 41 1 0 0 Updated Dec 16, 2019

• hackfest-deserialization-workshop
  0 4 0 0 Updated Nov 2, 2019

• dtd-finder

  List DTDs and generate XXE payloads using those local DTDs.
  Kotlin 38 187 0 0 Updated Oct 24, 2019

• terraform-inventory

  Forked from adammck/terraform-inventory

  Terraform State → Ansible Dynamic Inventory
  Go MIT 252 0 0 0 Updated Oct 1, 2019

• freshonions-torscraper Archived

  Forked from dirtyfilthy/freshonions-torscraper

  Fresh Onions is an open source TOR spider / hidden service onion crawler
  Python AGPL-3.0 114 75 6 0 Updated Sep 26, 2019

• blackhat-arsenal-tools

  Forked from toolswatch/blackhat-arsenal-tools

  Official Black Hat Arsenal Security Tools Repository
  GPL-3.0 805 1 0 0 Updated Aug 6, 2019

• bettercap

  Forked from bettercap/bettercap

  The Swiss Army knife for 802.11, BLE and Ethernet networks reconnaissance and MITM attacks.
  Go GPL-3.0 772 3 0 0 Updated Aug 5, 2019

• caplets

  Fork of caplets with RDP proxy caplet
  JavaScript 0 2 0 0 Updated Aug 2, 2019

• burp-fuzzy-encoding-generator

  Quickly test various encoding for a given value in Burp Intruder

  encoding extension burp pentest intruder
  Kotlin 2 1 0 0 Updated Jul 30, 2019

• CredSniper

  Forked from ustayready/CredSniper

  CredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens.
  HTML Apache-2.0 209 0 0 0 Updated Jul 25, 2019

• Serpico

  Forked from SerpicoProject/Serpico

  SimplE RePort wrIting and COllaboration tool
  JavaScript 324 0 0 0 Updated Jul 5, 2019

• SprayingToolkit

  Forked from byt3bl33d3r/SprayingToolkit

  Scripts to make password spraying attacks against Lync/S4B & OWA a lot quicker, less painful and more efficient
  Python GPL-3.0 133 0 0 0 Updated Jun 27, 2019

• php7-opcache-override

  Security-related PHP7 OPcache abuse tools and demo

  php7 poc vulnerability opcache
  Python MIT 63 219 1 0 Updated Mar 20, 2019

• SerpicoPlugins

  Forked from SerpicoProject/SerpicoPlugins

  Plugins for the Serpico Project
  Ruby 18 0 0 0 Updated Mar 1, 2019