Bishop Fox

Private professional services firm providing offensive security testing to the Fortune 500, financial institutions, and high-tech startups.

https://bishopfox.com
contact@bishopfox.com
Verified
We've verified that the organization BishopFox controls the domain:
- bishopfox.com
Learn more about verified organizations

Pinned

sliver Public

Adversary Emulation Framework

Go 1.9k 284
GitGot Public

Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.

Python 1k 168
eyeballer Public

Convolutional neural network for analyzing pentest screenshots

Python 523 88
dufflebag Public

Search exposed EBS volumes for secrets

Go 197 18
GadgetProbe Public

Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.

Java 424 69
h2csmuggler Public

HTTP Request Smuggling over HTTP/2 Cleartext (h2c)

Python 420 65

guardian-ci Public

Shell 2 MIT 1 0 2 Updated Oct 7, 2021
iam-vulnerable Public
Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.

HCL 140 MIT 9 0 0 Updated Oct 6, 2021
sliver Public
Adversary Emulation Framework

Go 1,913 GPL-3.0 284 82 (7 issues need help) 3 Updated Oct 5, 2021
GitGot Public
Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.

Python 1,035 LGPL-3.0 168 1 0 Updated Sep 20, 2021
badPods Public
A collection of manifests that will create pods with elevated privileges.

Shell 186 MIT 31 0 0 Updated Sep 18, 2021
zigdiggity Public
A ZigBee hacking toolkit by Bishop Fox

Python 196 GPL-3.0 49 3 1 Updated Sep 13, 2021
evilginx2 Public
Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

Go 0 941 0 0 Updated Sep 8, 2021
h2csmuggler Public
HTTP Request Smuggling over HTTP/2 Cleartext (h2c)

Python 420 MIT 65 4 3 Updated Aug 31, 2021
You-re-Doing-IoT-RNG Public
Results and device code from the DEF CON 29 presentation "You're Doing IoT RNG"

C 1 GPL-3.0 1 1 0 Updated Aug 5, 2021
docker-selenium Public
Docker images for the Selenium Grid Server

Shell 2 1,809 0 0 Updated Jun 18, 2021