Bishop Fox

Private professional services firm providing offensive security testing to the Fortune 500, financial institutions, and high-tech startups.

https://bishopfox.com
contact@bishopfox.com
Verified
We've verified that the organization BishopFox controls the domain:
- bishopfox.com
Learn more about verified organizations

Pinned

sliver Public

Adversary Emulation Framework

Go 1.9k 286
GitGot Public

Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.

Python 1k 166
eyeballer Public

Convolutional neural network for analyzing pentest screenshots

Python 520 87
dufflebag Public

Search exposed EBS volumes for secrets

Go 197 18
GadgetProbe Public

Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.

Java 424 69
h2csmuggler Public

HTTP Request Smuggling over HTTP/2 Cleartext (h2c)

Python 419 62

sliver Public
Adversary Emulation Framework

Go 1,898 GPL-3.0 286 80 (7 issues need help) 3 Updated Oct 1, 2021
iam-vulnerable Public
Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.

HCL 131 MIT 6 1 0 Updated Sep 30, 2021
GitGot Public
Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.

Python 1,034 LGPL-3.0 166 1 0 Updated Sep 20, 2021
badPods
A collection of manifests that will create pods with elevated privileges.

Shell 185 MIT 31 0 0 Updated Sep 18, 2021
zigdiggity Public
A ZigBee hacking toolkit by Bishop Fox

Python 195 GPL-3.0 48 3 1 Updated Sep 13, 2021
h2csmuggler
HTTP Request Smuggling over HTTP/2 Cleartext (h2c)

Python 419 MIT 62 4 3 Updated Aug 31, 2021
guardian-ci

Shell 2 MIT 1 0 1 Updated Aug 26, 2021
You-re-Doing-IoT-RNG Public
Results and device code from the DEF CON 29 presentation "You're Doing IoT RNG"

C 1 GPL-3.0 1 1 0 Updated Aug 5, 2021
docker-selenium Public
Docker images for the Selenium Grid Server

Shell 2 1,800 0 0 Updated Jun 18, 2021
eyeballer Public
Convolutional neural network for analyzing pentest screenshots

Python 520 GPL-3.0 87 6 2 Updated Jun 10, 2021