Bishop Fox

Repositories

• sliver

  Adversary Emulation Framework

  dns golang http gplv3 dns-server sliver red-team
  Go GPL-3.0 229 1,528 78 (7 issues need help) 5 Updated Jun 4, 2021

• wordlist-sanitizer

  Remove Offensive and Profane Words from Wordlists
  Go MIT 0 0 0 0 Updated May 26, 2021

• guardian-ci
  Shell MIT 0 1 0 0 Updated May 26, 2021

• eyeballer

  Convolutional neural network for analyzing pentest screenshots

  python machine-learning ai tensorflow security-tools pentesting-tools
  Python GPL-3.0 78 462 5 1 Updated May 18, 2021

• aws-signing

  Forked from chronoslynx/aws-signing

  CLI that allows user to submit http requests using AWS request signing
  Go MIT 3 0 0 0 Updated May 13, 2021

• spoofcheck

  Simple script that checks a domain for email protections

  python phishing spf dmarc-record email-security security-tools
  Python MIT 119 462 4 5 Updated May 3, 2021

• h2csmuggler

  HTTP Request Smuggling over HTTP/2 Cleartext (h2c)

  infosec bugbounty security-tools security-research
  Python MIT 42 350 1 2 Updated Apr 5, 2021

• public-pentesting-reports

  Forked from juliocesarfort/public-pentesting-reports

  Curated list of public penetration test reports released by several consulting firms and academic security groups
  CSS 1,210 1 0 0 Updated Mar 17, 2021

• GadgetProbe

  Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.

  java pentesting javassist security-tools burp-extensions java-deserialization pentest-tools
  Java MIT 68 398 0 0 Updated Mar 4, 2021

• json-interop-vuln-labs

  Companion labs to "An Exploration of JSON Interoperability Vulnerabilities"
  Python 11 127 0 0 Updated Feb 25, 2021

• badPods

  A collection of manifests that will create pods with elevated privileges.

  kubernetes security assessment penetration-testing exploitation podspec pods
  Shell MIT 20 126 0 0 Updated Jan 21, 2021

• zigdiggity

  A ZigBee hacking toolkit by Bishop Fox

  zigbee iot-security security-tools pentest-tool zigbee-hacking
  Python GPL-3.0 46 183 3 1 Updated Jan 5, 2021

• cyberdic

  An auxiliary spellcheck dictionary that corresponds with the Bishop Fox Cybersecurity Style Guide

  language spellcheck dictionary spelling cyber hunspell word-processor
  CC-BY-SA-4.0 16 56 0 0 Updated Dec 10, 2020

• rmiscout

  RMIScout uses wordlist and bruteforce strategies to enumerate Java RMI functions and exploit RMI parameter unmarshalling vulnerabilities

  java scanner javassist offensive-security java-rmi security-tools java-deserialization
  Java MIT 52 318 2 0 Updated Dec 8, 2020

• GitGot

  Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.

  python github-api security osint fuzzy-matching recon gists
  Python LGPL-3.0 158 986 1 1 Updated Sep 28, 2020

• smogcloud

  Find cloud assets that no one wants exposed 🔎 ☁️

  aws cloud api-documentation penetration-testing infosec blueteam security-tools
  Go 30 218 2 0 Updated Jul 20, 2020

• bfdecrypt

  Utility to decrypt App Store apps on jailbroken iOS 11.x
  C Apache-2.0 61 340 4 1 Updated May 24, 2020

• IDontSpeakSSL-deprecated Archived

  Simple tool based on sslyze to scan large scope and provide SSL/TLS vulnerabilities

  tls ssl security-tools testssl
  Python GPL-3.0 8 46 0 0 Updated Apr 6, 2020

• ca-clone

  Scripts to clone CA certificates for use in HTTPS client attacks.

  reverse-engineering mitm pentesting security-tools
  Shell GPL-3.0 14 19 0 0 Updated Mar 26, 2020

• dufflebag

  Search exposed EBS volumes for secrets

  aws-ebs elasticbeanstalk security-tools aws-ebs-volumes aws-ebs-snapshot aws-eb
  Go GPL-3.0 17 188 1 0 Updated Feb 5, 2020

• rickmote

  The Rickmote Controller: Hijack TVs using Google Chromecast

  prank google-chromecast rickroll rickmote
  Python GPL-3.0 36 195 4 0 Updated Feb 4, 2020

• pwn-pulse

  Exploit for Pulse Connect Secure SSL VPN arbitrary file read vulnerability (CVE-2019-11510)

  exploit penetration-testing infosec pentesting cve red-team pentest-scripts
  Shell GPL-3.0 53 115 1 0 Updated Jan 15, 2020

• bfinject

  Dylib injection for iOS 11.0 - 11.1.2 with LiberiOS and Electra jailbreaks
  Objective-C++ Apache-2.0 142 549 25 9 Updated Dec 19, 2019

• aws_seeker

  Forked from hachisanju/aws_seeker
  Python 5 0 0 0 Updated Nov 22, 2019

• .github

  Bishop Fox Engineering
  0 1 0 0 Updated Nov 20, 2019

• n0sc0p3

  Forked from hachisanju/n0sc0p3

  Silly little aws auditing project
  Python 1 0 0 0 Updated Nov 14, 2019

• s3-odradek

  Forked from hachisanju/s3-odradek

  Little tool to suss out S3 permissions as visible to the public.
  Python 1 0 0 0 Updated Nov 14, 2019

• gowitness

  Forked from sensepost/gowitness

  🔍 gowitness - a golang, web screenshot utility using Chrome Headless
  Go 162 8 0 0 Updated May 31, 2019

• SpoofcheckSelfTest

  Web application that lets you test if your domain is vulnerable to email spoofing
  Python Apache-2.0 13 27 0 1 Updated Mar 5, 2019

• deephack

  PoC code from DEF CON 25 presentation

  machine-learning ai proof-of-concept tensorflow keras security-tools
  Python 50 223 3 1 Updated Apr 18, 2018