ReversecLabs

The Leading Security Assessment Framework for Android.

Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits.

The iOS Security Testing Framework

SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled...

A graph-based tool for visualizing effective access and resource relationships in AWS environments.

Automated Attack Simulation in the Cloud, complete with detection use cases.

DNS Rebinding Exploitation Framework

Cross Platform Kernel Fuzzer Framework

Physmem2profit can be used to create a minidump of a target hosts' LSASS process by analysing physical memory remotely

A repository of code signing certificates known to have been leaked or stolen, then abused by threat actors

WePWNise generates architecture independent VBA code to be used in Office documents or templates and automates bypassing application control and exploit mitigation software.

CAPTCHA22 is a toolset for building, and training, CAPTCHA cracking models using neural networks.

Tools for decoding TPM SPI transaction and extracting the BitLocker key from them.

Simple Prompt Injection Kit for Evaluation and Exploitation

macOS Kernel Fuzzer

Enumeration and reconnaissance activities in the Microsoft Azure Cloud.

A meterpreter extension for applying hooks to avoid windows defender memory scans

The Android Agent for the Drozer Security Assessment Framework.

Code and exercises for a workshop on z3 and angr

SharpClipHistory is a .NET application written in C# that can be used to read the contents of a user's clipboard history in Windows 10 starting from the 1809 Build.

Suite of tools to facilitate attacks against the Jamf macOS management platform.

PEAS is a Python 2 library and command line application for running commands on an ActiveSync server e.g. Microsoft Exchange.

A command line tool for creating malicious outlook rules

One Token To Rule Them All https://labs.reversec.com/posts/2012/07/incognito-v20-released

Ansible/Vagrant/Packer files to create a virtual machine with the tooling needed to perform cloud security assessments

Attack techniques for threat emulation in VMware environments

A public cloud security knowledgebase - https://www.secwiki.cloud/