Repositories list

• SteppingStones

  Public
  A Red Team Activity Hub

  bloodhoundrecordingcobalt-strike+ 2red-teamcracking-hashes

  Python

  •

  Apache License 2.0

  •33•216•5•0•Updated Jul 17, 2025Jul 17, 2025

• ScoutSuite

  Public
  Multi-Cloud Security Auditing Tool

  awssecurityauditing+ 3cloudazuregcp

  Python

  •

  GNU General Public License v2.0

  •1.1k•7.2k•235•42•Updated Jul 14, 2025Jul 14, 2025

• Sniffle

  Public
  A sniffer for Bluetooth 5 and 4.x LE

  Python

  •

  GNU General Public License v3.0

  •146•993•21•3•Updated Jul 12, 2025Jul 12, 2025

• singularity

  Public
  A DNS rebinding attack framework.

  dnsiotattack+ 2dns-rebindingvulnerability

  JavaScript

  •

  MIT License

  •152•1.1k•8•2•Updated Jul 3, 2025Jul 3, 2025

• kramdown-ts

  Public
  TypeScript

  •

  Other

  •1•0•0•0•Updated Jun 30, 2025Jun 30, 2025

• blackboxprotobuf

  Public
  Blackbox Protobuf is a set of tools for working with encoded Protocol Buffers (protobuf) without the matching protobuf definition.

  protobufburp

  Python

  •

  MIT License

  •106•631•3•3•Updated Jun 17, 2025Jun 17, 2025

• freebsd-kernel-module-rust

  Public
  Rust

  •

  BSD 2-Clause "Simplified" License

  •4•60•1•0•Updated Jun 10, 2025Jun 10, 2025

• http-mcp-bridge

  Public
  Python

  •

  MIT License

  •0•5•0•0•Updated May 2, 2025May 2, 2025

• libslub

  Public
  Python

  •

  MIT License

  •18•180•3•1•Updated Feb 8, 2025Feb 8, 2025

• chipsec

  Public
  Platform Security Assessment Framework

  Python

  •

  GNU General Public License v2.0

  •593•5•0•0•Updated Nov 24, 2024Nov 24, 2024

• cryptopals-py

  Public
  Python solutions to the Cryptopals Crypto Challenges

  pythoncryptographycryptopals

  Python

  •0•7•0•0•Updated Nov 20, 2024Nov 20, 2024

• ghidra-nanomips

  Public
  nanoMIPS module for Ghidra

  reverse-engineeringghidraghidra-plugin+ 2ghidra-extensionnanomips

  Python

  •

  GNU General Public License v3.0

  •10•52•0•0•Updated Nov 18, 2024Nov 18, 2024

• ghostrings

  Public
  Ghidra scripts for recovering string definitions in Go binaries

  gogolangreverse-engineering+ 3ghidraghidra-extensionghidra-scripts

  Java

  •

  GNU General Public License v3.0

  •9•116•0•0•Updated Nov 12, 2024Nov 12, 2024

• nmap

  Public
  Nmap - the Network Mapper. Github mirror of official SVN repository.

  C

  •

  Other

  •2.6k•1•0•0•Updated Oct 24, 2024Oct 24, 2024

• test_avb_key

  Public
  Python

  •1•5•0•0•Updated Sep 12, 2024Sep 12, 2024

• sobelow

  Public
  Security-focused static analysis for the Phoenix Framework

  securityelixirstatic-analysis+ 1phoenix-framework

  Elixir

  •

  Apache License 2.0

  •109•1.7k•33•4•Updated Aug 20, 2024Aug 20, 2024

• PMapper

  Public
  A tool for quickly evaluating IAM permissions in AWS.

  pythonawsiam+ 2botocorecloudsecurity

  Python

  •

  GNU Affero General Public License v3.0

  •181•1.5k•27•6•Updated Aug 2, 2024Aug 2, 2024

• Cartographer

  Public
  Code Coverage Exploration Plugin for Ghidra

  Java

  •

  Apache License 2.0

  •30•356•3•2•Updated Jul 19, 2024Jul 19, 2024

• cloud_ip_ranges

  Public
  Identify IP addresses owned by public cloud providers

  cloudosint

  Python

  •

  MIT License

  •31•125•4•2•Updated Jul 2, 2024Jul 2, 2024

• Berserko

  Public
  Burp Suite extension to perform Kerberos authentication

  Java

  •

  GNU Affero General Public License v3.0

  •16•104•9•0•Updated Jun 28, 2024Jun 28, 2024

• phantap

  Public
  Phantom Tap (PhanTap) - an ‘invisible’ network tap aimed at red teams

  C

  •

  GNU General Public License v3.0

  •81•603•6•0•Updated Jun 2, 2024Jun 2, 2024

• LoggerPlusPlus

  Public
  Advanced Burp Suite Logging Extension

  Java

  •

  GNU Affero General Public License v3.0

  •168•670•30•4•Updated May 31, 2024May 31, 2024

• mtk_bp

  Public
  MediaTek BP firmware tools

  mediatekreverse-engineeringbaseband

  Python

  •

  GNU General Public License v3.0

  •14•61•0•0•Updated May 30, 2024May 30, 2024

• exploit_mitigations

  Public
  Knowledge base of exploit mitigations available across numerous operating systems, architectures and applications and versions.

  MIT License

  •100•906•1•0•Updated May 20, 2024May 20, 2024

• manim-cranim

  Public
  Toolkit for creating cryptographic figures and videos.

  cryptographycomputer-science-educationmanim

  Python

  •

  MIT License

  •2•33•0•0•Updated May 17, 2024May 17, 2024

• fips203

  Public
  Pure Rust implementation of (draft) FIPS 203 Module-Lattice-based Key-Encapsulation Mechanism Standard for server, desktop, browser and embedded applications.

  Rust

  •

  Apache License 2.0

  •0•17•0•0•Updated May 15, 2024May 15, 2024

• kubetcd

  Public
  Post-exploit a compromised etcd, gain persistence and remote shell to nodes.

  kubernetesetcd

  Go

  •

  Apache License 2.0

  •7•80•1•2•Updated May 7, 2024May 7, 2024

• aws-inventory

  Public
  Discover resources created in an AWS account.

  reactpythonaws

  Python

  •

  Apache License 2.0

  •128•719•15•10•Updated Apr 5, 2024Apr 5, 2024

• autochrome

  Public
  This tool downloads, installs, and configures a shiny new copy of Chromium.

  HTML

  •

  Apache License 2.0

  •81•462•8•5•Updated Apr 3, 2024Apr 3, 2024

• android_demystification_toolbox

  Public
  ADT is a toolset designed to help model application behavior, research and test security vulnerabilities, and facilitate reversing hostile code.

  Python

  •

  Apache License 2.0

  •0•4•0•0•Updated Feb 28, 2024Feb 28, 2024