F-Secure LABS

Repositories

• captcha22

  CAPTCHA22 is a toolset for building, and training, CAPTCHA cracking models using neural networks.
  Python MIT 28 185 2 0 Updated Dec 28, 2020

• C3

  Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits.
  C++ 150 740 3 6 Updated Dec 22, 2020

• bitlocker-spi-toolkit

  Tools for decoding TPM SPI transaction and extracting the BitLocker key from them.
  Python 1 9 1 0 Updated Dec 21, 2020

• SharpGPOAbuse

  SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled by that GPO.
  C# 68 359 3 1 Updated Dec 15, 2020

• macOSTriageCollectionScript

  A triage data collection script for macOS
  Shell GPL-3.0 0 0 0 0 Updated Nov 28, 2020

• drozer-agent

  The Android Agent for the Mercury Security Assessment Framework.

  android java security mobile pentesting drozer mwr
  Java 50 70 3 0 Updated Nov 12, 2020

• drozer

  The Leading Security Assessment Framework for Android.

  android java security mobile pentesting drozer mwr
  Python 618 2,403 58 6 Updated Nov 6, 2020

• CalendarPersist

  JXA script to allow programmatic persistence via macOS Calendar.app alerts.
  JavaScript 3 21 0 0 Updated Oct 31, 2020

• needle

  The iOS Security Testing Framework

  python security ios mobile needle pentesting
  Python 268 1,101 24 2 Updated Oct 25, 2020

• awspx

  A graph-based tool for visualizing effective access and resource relationships in AWS environments.

  aws graph-theory pentesting aws-security
  Python GPL-3.0 53 517 1 0 Updated Oct 23, 2020

• LinuxCatScale

  Incident Response collection and processing scripts with automated reporting scripts
  Shell GPL-3.0 5 10 0 0 Updated Oct 22, 2020

• GWTMap
  Python BSD-3-Clause 5 40 1 0 Updated Oct 19, 2020

• timeinator

  Timeinator is an extension for Burp Suite that can be used to perform timing attacks over an unreliable network such as the internet.
  Python 11 12 0 0 Updated Oct 15, 2020

• dref

  DNS Rebinding Exploitation Framework

  iot hacking pentesting iot-security red-team web-hacking iot-security-testing
  JavaScript 62 414 2 0 Updated Oct 1, 2020

• Re-Desk-v2.3-Vulnerabilities
  Python 0 1 0 0 Updated Sep 28, 2020

• N1QLMap

  The tool exfiltrates data from Couchbase database by exploiting N1QL injection vulnerabilities.
  Python 9 64 0 0 Updated Sep 2, 2020

• peas

  PEAS is a Python 2 library and command line application for running commands on an ActiveSync server e.g. Microsoft Exchange.
  Python 31 103 4 1 Updated Aug 25, 2020

• Ninjasploit

  A meterpreter extension for applying hooks to avoid windows defender memory scans
  C 22 131 2 1 Updated Aug 13, 2020

• leonidas

  Automated Attack Simulation in the Cloud, complete with detection use cases.
  Python MIT 33 275 2 0 Updated Aug 6, 2020

• incognito

  One Token To Rule Them All https://labs.mwrinfosecurity.com/blog/incognito-v2-0-released/
  C 13 45 1 1 Updated Jul 9, 2020

• fdpasser

  Example of passing file descriptors into a container to perform a privilege escalation on the host
  C 2 13 0 0 Updated Jul 3, 2020

• Jamf-Attack-Toolkit

  Suite of tools to facilitate attacks against the Jamf macOS management platform.
  Python 18 101 0 1 Updated Apr 22, 2020

• physmem2profit

  Physmem2profit can be used to create a minidump of a target hosts' LSASS process by analysing physical memory remotely

  windows security pentesting red-team credential-theft
  C# Apache-2.0 37 205 1 0 Updated Apr 14, 2020

• android-keystore-audit
  JavaScript 22 103 2 0 Updated Apr 6, 2020

• Jandroid
  Python BSD-3-Clause 52 250 5 0 Updated Mar 3, 2020

• z3_and_angr_binary_analysis_workshop

  Code and exercises for a workshop on z3 and angr

  workshop reverse-engineering z3 binary-analysis smt-solver angr
  Python 28 146 1 1 Updated Feb 26, 2020

• SharpClipHistory

  SharpClipHistory is a .NET application written in C# that can be used to read the contents of a user's clipboard history in Windows 10 starting from the 1809 Build.
  C# 23 106 0 1 Updated Jan 23, 2020

• keywe-tooling

  Tools that can be used to interact with the KeyWe Smart Lock device.
  Python 3 5 0 0 Updated Dec 10, 2019

• Cisco-UCM-SQLi-Scripts

  Scripts that can be used to exploit CVE-2019-15972 which was an Authenticated SQLi issue in Cisco Unified Call Manager (UCM).
  Python 5 4 0 0 Updated Nov 20, 2019

• SharpGPO-RemoteAccessPolicies

  A C# tool for enumerating remote access policies through group policy.
  C# 23 66 0 0 Updated Apr 18, 2019