Projects in Awesome Lists by nccgroup
A curated list of projects in awesome lists by nccgroup .
https://github.com/nccgroup/Scout2
Security auditing tool for AWS environments
Last synced: 02 Apr 2025
https://github.com/nccgroup/sobelow
Security-focused static analysis for the Phoenix Framework
elixir phoenix-framework security static-analysis
Last synced: 29 Apr 2025
https://github.com/nccgroup/winpayloads
Undetectable Windows Payload Generation
antivirus bypass kali metasploit meter msfconsole netsec payloads persistence powershell python uac undetectable windows
Last synced: 16 May 2025
https://github.com/nccgroup/Winpayloads
Undetectable Windows Payload Generation
antivirus bypass kali metasploit meter msfconsole netsec payloads persistence powershell python uac undetectable windows
Last synced: 26 Mar 2025
https://github.com/nccgroup/pmapper
A tool for quickly evaluating IAM permissions in AWS.
aws botocore cloudsecurity iam python
Last synced: 15 May 2025
https://github.com/nccgroup/PMapper
A tool for quickly evaluating IAM permissions in AWS.
aws botocore cloudsecurity iam python
Last synced: 01 Apr 2025
https://github.com/nccgroup/house
A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.
android frida mobile pentest-tool
Last synced: 16 May 2025
https://github.com/nccgroup/redsnarf
RedSnarf is a pen-testing / red-teaming tool for Windows environments
active-directory pentesting pentesting-windows python windows
Last synced: 16 May 2025
https://github.com/nccgroup/socksoverrdp
Socks5/4/4a Proxy support for Remote Desktop Protocol / Terminal Services / Citrix / XenApp / XenDesktop
Last synced: 12 Apr 2025
https://github.com/nccgroup/featherduster
An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction
cryptanalysis crypto cryptography encryption exploit exploitation exploitation-framework exploits python security
Last synced: 16 May 2025
https://github.com/nccgroup/singularity
A DNS rebinding attack framework.
attack dns dns-rebinding iot vulnerability
Last synced: 14 May 2025
https://github.com/nccgroup/SocksOverRDP
Socks5/4/4a Proxy support for Remote Desktop Protocol / Terminal Services / Citrix / XenApp / XenDesktop
Last synced: 11 Jul 2025
https://github.com/nccgroup/autorepeater
Automated HTTP Request Repeating With Burp Suite
burp-plugin burpsuite security
Last synced: 25 Oct 2025
https://github.com/nccgroup/AutoRepeater
Automated HTTP Request Repeating With Burp Suite
burp-plugin burpsuite security
Last synced: 19 Apr 2025
https://github.com/nccgroup/exploit_mitigations
Knowledge base of exploit mitigations available across numerous operating systems, architectures and applications and versions.
Last synced: 27 Jan 2026
https://github.com/nccgroup/fuzzowski
the Network Protocol Fuzzer that we will want to use.
Last synced: 13 Apr 2025
https://github.com/nccgroup/abptts
TCP tunneling over HTTP/HTTPS for web application servers
Last synced: 05 Apr 2025
https://github.com/nccgroup/ABPTTS
TCP tunneling over HTTP/HTTPS for web application servers
Last synced: 13 Mar 2025
https://github.com/nccgroup/aws-inventory
Discover resources created in an AWS account.
Last synced: 13 Apr 2025
https://github.com/nccgroup/BurpSuiteHTTPSmuggler
A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques
burpsuite burpsuite-extender bypass waf
Last synced: 19 Apr 2025
https://github.com/nccgroup/burpsuitehttpsmuggler
A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques
burpsuite burpsuite-extender bypass waf
Last synced: 05 Apr 2025
https://github.com/nccgroup/triforceafl
AFL/QEMU fuzzing with full-system emulation.
Last synced: 05 Apr 2025
https://github.com/nccgroup/nmap-nse-vulnerability-scripts
NMAP Vulnerability Scanning Scripts
Last synced: 04 Apr 2025
https://github.com/nccgroup/TriforceAFL
AFL/QEMU fuzzing with full-system emulation.
Last synced: 12 May 2025
https://github.com/nccgroup/sadcloud
A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure
Last synced: 25 Jan 2026
https://github.com/nccgroup/loggerplusplus
Advanced Burp Suite Logging Extension
Last synced: 12 Apr 2025
https://github.com/nccgroup/LoggerPlusPlus
Advanced Burp Suite Logging Extension
Last synced: 02 Apr 2025
https://github.com/nccgroup/nccfsas
Information released publicly by NCC Group's Full Spectrum Attack Simulation (FSAS) team.
Last synced: 18 Oct 2025
https://github.com/nccgroup/phantap
Phantom Tap (PhanTap) - an ‘invisible’ network tap aimed at red teams
Last synced: 04 Apr 2025
https://github.com/nccgroup/blackboxprotobuf
Blackbox Protobuf is a set of tools for working with encoded Protocol Buffers (protobuf) without the matching protobuf definition.
Last synced: 14 May 2025
https://github.com/nccgroup/freddy
Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans
Last synced: 04 Apr 2025
https://github.com/nccgroup/tracy
A tool designed to assist with finding all sinks and sources of a web application and display these results in a digestible manner.
browser-extension chrome chrome-extension firefox firefox-addon security security-tools xss xss-detection
Last synced: 04 Apr 2025
https://github.com/nccgroup/azucar
Security auditing tool for Azure environments
Last synced: 02 Apr 2025
https://github.com/nccgroup/VCG
VisualCodeGrepper - Code security scanning tool.
Last synced: 29 Mar 2025
https://github.com/nccgroup/vcg
VisualCodeGrepper - Code security scanning tool.
Last synced: 27 Jan 2026
https://github.com/nccgroup/cyber-defence
Information released publicly by NCC Group's Cyber Incident Response Team
Last synced: 05 Apr 2025
https://github.com/nccgroup/scrying
A tool for collecting RDP, web and VNC screenshots all in one place
Last synced: 05 Apr 2025
https://github.com/nccgroup/autochrome
This tool downloads, installs, and configures a shiny new copy of Chromium.
Last synced: 28 Jan 2026
https://github.com/nccgroup/wssip
Application for capturing, modifying and sending custom WebSocket data from client to server and vice versa.
mitm nodejs socket-io websocket websockets
Last synced: 04 Apr 2025
https://github.com/nccgroup/idahunt
idahunt is a framework to analyze binaries with IDA Pro and hunt for things in IDA Pro
Last synced: 05 Apr 2025
https://github.com/nccgroup/crosssitecontenthijacking
Content hijacking proof-of-concept using Flash, PDF and Silverlight
Last synced: 28 Jan 2026
https://github.com/nccgroup/autopwn
Specify targets and run sets of tools against them
Last synced: 04 Apr 2025
https://github.com/nccgroup/vlan-hopping---frogger
Easy 802.1Q VLAN Hopping
Last synced: 07 Apr 2025
https://github.com/nccgroup/solitude
Solitude is a privacy analysis tool that enables anyone to conduct their own privacy investigations. Whether a curious novice or a more advanced researcher, Solitude makes the process of evaluating user privacy within an app accessible for everyone.
Last synced: 07 Apr 2025
https://github.com/nccgroup/Solitude
Solitude is a privacy analysis tool that enables anyone to conduct their own privacy investigations. Whether a curious novice or a more advanced researcher, Solitude makes the process of evaluating user privacy within an app accessible for everyone.
Last synced: 11 Jul 2025
https://github.com/nccgroup/DriverBuddy
DriverBuddy is an IDA Python script to assist with the reverse engineering of Windows kernel drivers.
Last synced: 15 Mar 2025
https://github.com/nccgroup/driverbuddy
DriverBuddy is an IDA Python script to assist with the reverse engineering of Windows kernel drivers.
Last synced: 07 Apr 2025
https://github.com/nccgroup/cartographer
Code Coverage Exploration Plugin for Ghidra
Last synced: 06 Apr 2025
https://github.com/nccgroup/shocker
A tool to find and exploit servers vulnerable to Shellshock
Last synced: 07 Sep 2025
https://github.com/nccgroup/wmicmd
A command shell wrapper using only WMI for Microsoft Windows
Last synced: 09 Apr 2025
https://github.com/nccgroup/accomplice
Tools for discovery and abuse of COM hijacks
Last synced: 09 Apr 2025
https://github.com/nccgroup/acCOMplice
Tools for discovery and abuse of COM hijacks
Last synced: 11 Jul 2025
https://github.com/nccgroup/gtfoblookup
Offline command line lookup utility for GTFOBins (https://github.com/GTFOBins/GTFOBins.github.io), LOLBAS (https://github.com/LOLBAS-Project/LOLBAS), WADComs (https://wadcoms.github.io), and HijackLibs (https://hijacklibs.net/).
gtfobins hijacklibs lolbas pentesting pentesting-tools privesc python redteam wadcoms
Last synced: 07 Apr 2025
https://github.com/nccgroup/depthcharge
A U-Boot hacking toolkit for security researchers and tinkerers
embedded-systems security-tools u-boot
Last synced: 05 May 2025
https://github.com/nccgroup/keimpx
Check for valid credentials across a network over SMB
Last synced: 06 Apr 2025
https://github.com/nccgroup/umap2
Umap2 is the second revision of NCC Group's python based USB host security assessment tool.
Last synced: 07 Apr 2025
https://github.com/nccgroup/upnp-pentest-toolkit
UPnP Pentest Toolkit for Windows
Last synced: 19 Sep 2025
https://github.com/nccgroup/UPnP-Pentest-Toolkit
UPnP Pentest Toolkit for Windows
Last synced: 19 Apr 2025
https://github.com/nccgroup/asatools
Main repository to pull all NCC Group Cisco ASA-related tool projects.
Last synced: 09 May 2025
https://github.com/nccgroup/cisco-snmp-enumeration
Automated Cisco SNMP Enumeration, Brute Force, Configuration Download and Password Cracking
Last synced: 09 May 2025
https://github.com/nccgroup/tpmgenie
TPM Genie is an I2C bus interposer for discrete Trusted Platform Modules
arduino hardware interposer raspberry-pi security teensy tpm trusted-platform-module
Last synced: 21 Aug 2025
https://github.com/nccgroup/detectwindowscopyonwriteforapi
Enumerate various traits from Windows processes as an aid to threat hunting
Last synced: 02 Jul 2025
https://github.com/nccgroup/binproxy
BinProxy is a proxy for arbitrary TCP connections. You can define custom message formats using the BinData gem.
Last synced: 06 Apr 2025
https://github.com/nccgroup/triforcelinuxsyscallfuzzer
A linux system call fuzzer using TriforceAFL
Last synced: 09 Apr 2025
https://github.com/nccgroup/TriforceLinuxSyscallFuzzer
A linux system call fuzzer using TriforceAFL
Last synced: 27 Sep 2025
https://github.com/nccgroup/blesuite
BLESuite is a Python package that provides an easier way to test Bluetooth Low Energy (BLE) device
Last synced: 28 Oct 2025
https://github.com/nccgroup/steppingstones
A Red Team Activity Hub
bloodhound cobalt-strike cracking-hashes recording red-team
Last synced: 04 Apr 2025
https://github.com/nccgroup/pybeacon
A collection of scripts for dealing with Cobalt Strike beacons in Python
Last synced: 26 Apr 2025
https://github.com/nccgroup/bkscan
BlueKeep scanner supporting NLA
bluekeep cve-2019-0708 nla scanner
Last synced: 16 Jul 2025
https://github.com/nccgroup/typofinder
A finder of domain typos showing country of IP address
Last synced: 09 Aug 2025
https://github.com/nccgroup/requests-racer
Small Python library that makes it easy to exploit race conditions in web apps with Requests.
Last synced: 26 Apr 2025
https://github.com/nccgroup/lazydroid
bash script to facilitate some aspects of an Android application assessment
Last synced: 26 Apr 2025
https://github.com/nccgroup/tcpprox
A small command-line TCP proxy utility written in Python
Last synced: 26 Apr 2025
https://github.com/nccgroup/LazyDroid
bash script to facilitate some aspects of an Android application assessment
Last synced: 12 Jul 2025
https://github.com/nccgroup/whalescan
Whalescan is a vulnerability scanner for Windows containers, which performs several benchmark checks, as well as checking for CVEs/vulnerable packages on the container
Last synced: 26 Apr 2025
https://github.com/nccgroup/chuckle
An automated SMB relay exploitation script.
Last synced: 26 Apr 2025
https://github.com/nccgroup/carnivore
Tool for assessing on-premises Microsoft servers authentication such as ADFS, Skype, Exchange, and RDWeb
Last synced: 26 Apr 2025
https://github.com/nccgroup/gitpwnd
GitPwnd is a network penetration tool that lets you use a git repo for command and control of compromised machines
Last synced: 26 Apr 2025
https://github.com/nccgroup/change-lockscreen
Offensive tool to trigger network authentications as SYSTEM
Last synced: 26 Apr 2025
https://github.com/nccgroup/decoder-improved
Improved decoder for Burp Suite
Last synced: 09 Jul 2025
https://github.com/nccgroup/port-scan-automation
Automate NMAP Scans and Generate Custom Nessus Policies Automatically
Last synced: 22 Aug 2025
https://github.com/nccgroup/Decoder-Improved
Improved decoder for Burp Suite
Last synced: 19 Apr 2025
https://github.com/nccgroup/ble-replay
BLE-Replay is a Bluetooth Low Energy (BLE) peripheral assessment tool
Last synced: 26 Apr 2025
https://github.com/nccgroup/outlookleaktest
The Outlook HTML Leak Test Project
Last synced: 26 Apr 2025