nccgroup

Multi-Cloud Security Auditing Tool

Security-focused static analysis for the Phoenix Framework

Security auditing tool for AWS environments

Undetectable Windows Payload Generation

A tool for quickly evaluating IAM permissions in AWS.

A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.

HTA encryption tool for RedTeams

A DNS rebinding attack framework.

Socks5/4/4a Proxy support for Remote Desktop Protocol / Terminal Services / Citrix / XenApp / XenDesktop

RedSnarf is a pen-testing / red-teaming tool for Windows environments

A sniffer for Bluetooth 5 and 4.x LE

An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction

Knowledge base of exploit mitigations available across numerous operating systems, architectures and applications and versions.

Automated HTTP Request Repeating With Burp Suite

A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure

the Network Protocol Fuzzer that we will want to use.

TCP tunneling over HTTP/HTTPS for web application servers

A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques

Blackbox Protobuf is a set of tools for working with encoded Protocol Buffers (protobuf) without the matching protobuf definition.

Discover resources created in an AWS account.

Advanced Burp Suite Logging Extension

AFL/QEMU fuzzing with full-system emulation.

Phantom Tap (PhanTap) - an ‘invisible’ network tap aimed at red teams

NMAP Vulnerability Scanning Scripts

Information released publicly by NCC Group's Full Spectrum Attack Simulation (FSAS) team.

Security auditing tool for Azure environments

Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans

A tool designed to assist with finding all sinks and sources of a web application and display these results in a digestible manner.

VisualCodeGrepper - Code security scanning tool.

This tool downloads, installs, and configures a shiny new copy of Chromium.

Information released publicly by NCC Group's Cyber Incident Response Team

A tool for collecting RDP, web and VNC screenshots all in one place

Application for capturing, modifying and sending custom WebSocket data from client to server and vice versa.

idahunt is a framework to analyze binaries with IDA Pro and hunt for things in IDA Pro

Easy 802.1Q VLAN Hopping

Code Coverage Exploration Plugin for Ghidra

Specify targets and run sets of tools against them

DriverBuddy is an IDA Python script to assist with the reverse engineering of Windows kernel drivers.

Content hijacking proof-of-concept using Flash, PDF and Silverlight

Solitude is a privacy analysis tool that enables anyone to conduct their own privacy investigations. Whether a curious novice or a more advanced researcher, Solitude makes the process of...

Tools for discovery and abuse of COM hijacks

A command shell wrapper using only WMI for Microsoft Windows

A tool to find and exploit servers vulnerable to Shellshock

Another RTTI Parsing IDA plugin

The USB host security assessment tool

Offline command line lookup utility for GTFOBins (https://github.com/GTFOBins/GTFOBins.github.io), LOLBAS (https://github.com/LOLBAS-Project/LOLBAS), WADComs (https://wadcoms.github.io), and...

Umap2 is the second revision of NCC Group's python based USB host security assessment tool.

A U-Boot hacking toolkit for security researchers and tinkerers

Check for valid credentials across a network over SMB

UPnP Pentest Toolkit for Windows

Metasploit AV Evasion Tool

A Red Team Activity Hub

Main repository to pull all NCC Group Cisco ASA-related tool projects.

Google Cloud Platform Security Tool

TPM Genie is an I2C bus interposer for discrete Trusted Platform Modules

Automated Cisco SNMP Enumeration, Brute Force, Configuration Download and Password Cracking

A simple embedded Linux backdoor.

Enumerate various traits from Windows processes as an aid to threat hunting

A number of Recipes for AWS

BLESuite is a Python package that provides an easier way to test Bluetooth Low Energy (BLE) device

Kubernetes Auto Analyzer

A linux system call fuzzer using TriforceAFL

BinProxy is a proxy for arbitrary TCP connections. You can define custom message formats using the BinData gem.

A collection of scripts for dealing with Cobalt Strike beacons in Python

BlueKeep scanner supporting NLA

A finder of domain typos showing country of IP address

Small Python library that makes it easy to exploit race conditions in web apps with Requests.

bash script to facilitate some aspects of an Android application assessment

A small command-line TCP proxy utility written in Python

Whalescan is a vulnerability scanner for Windows containers, which performs several benchmark checks, as well as checking for CVEs/vulnerable packages on the container

An automated SMB relay exploitation script.

BLE-Replay is a Bluetooth Low Energy (BLE) peripheral assessment tool

Tool for assessing on-premises Microsoft servers authentication such as ADFS, Skype, Exchange, and RDWeb

Offensive tool to trigger network authentications as SYSTEM

GitPwnd is a network penetration tool that lets you use a git repo for command and control of compromised machines

Ghidra scripts for recovering string definitions in Go binaries

Automate NMAP Scans and Generate Custom Nessus Policies Automatically

Improved decoder for Burp Suite

eBPF - extended Berkeley Packet Filter tooling

SCOMDecrypt is a tool to decrypt stored RunAs credentials from SCOM servers

Hodor! Fuzzer..

The Outlook HTML Leak Test Project

Windows Share Enumerator

Qubes containerization on Windows

Windows NT ioctl bruteforcer and modular fuzzer

Searches for strings, regex, credit card numbers of magnetic stripe card tracks in a Windows process's memory space

The Zulu fuzzer

A Burp Extension designed to identify argument injection vulnerabilities.

Identify IP addresses owned by public cloud providers

This is an intentionally vulnerable smart contract truffle deployment aimed at allowing those interested in smart contract security to exploit a wide variety of issues in a safe environment.

Salesforce object access auditor

Pcap importer for Burp

Pentester-focused Docker registry tool to enumerate and pull images