Repositories list

• SteppingStones

  Public
  A Red Team Activity Hub

  bloodhoundrecordingcobalt-strike+ 2

  bloodhoundrecordingcobalt-strikered-teamcracking-hashes

  Python

  •

  Apache License 2.0

  •33•235•5•0•Updated Mar 25, 2026Mar 25, 2026

• powerg-tools

  Public
  Tools for reverse engineering and interacting with the PowerG radio protocol

  reverse-engineeringsdrhackrf+ 1

  reverse-engineeringsdrhackrfpowerg

  Python

  •

  GNU General Public License v3.0

  •0•3•0•0•Updated Mar 25, 2026Mar 25, 2026

• blackboxprotobuf

  Public
  Blackbox Protobuf is a set of tools for working with encoded Protocol Buffers (protobuf) without the matching protobuf definition.

  protobufburp

  protobufburp

  Python

  •

  MIT License

  •112•709•7•4•Updated Feb 5, 2026Feb 5, 2026

• mtk_bp

  Public
  MediaTek BP firmware tools

  mediatekreverse-engineeringbaseband

  mediatekreverse-engineeringbaseband

  Python

  •

  GNU General Public License v3.0

  •19•69•0•0•Updated Jan 13, 2026Jan 13, 2026

• singularity

  Public
  A DNS rebinding attack framework.

  dnsiotattack+ 2

  dnsiotattackvulnerabilitydns-rebinding

  JavaScript

  •

  MIT License

  •158•1.3k•12•2•Updated Dec 4, 2025Dec 4, 2025

• ghostrings

  Public
  Ghidra scripts for recovering string definitions in Go binaries

  gogolangreverse-engineering+ 3

  gogolangreverse-engineeringghidraghidra-extensionghidra-scripts

  Java

  •

  GNU General Public License v3.0

  •9•129•0•0•Updated Nov 25, 2025Nov 25, 2025

• http-mcp-bridge

  Public
  Python

  •

  MIT License

  •1•15•0•0•Updated Nov 13, 2025Nov 13, 2025

• ghidra-nanomips

  Public
  nanoMIPS module for Ghidra

  reverse-engineeringghidraghidra-plugin+ 2

  reverse-engineeringghidraghidra-pluginghidra-extensionnanomips

  Python

  •

  GNU General Public License v3.0

  •11•55•0•0•Updated Nov 6, 2025Nov 6, 2025

• phantap

  Public
  Phantom Tap (PhanTap) - an ‘invisible’ network tap aimed at red teams

  C

  •

  GNU General Public License v3.0

  •82•621•6•0•Updated Oct 6, 2025Oct 6, 2025

• Sniffle

  Public
  A sniffer for Bluetooth 5 and 4.x LE

  snifferbluetoothble

  snifferbluetoothble

  Python

  •

  GNU General Public License v3.0

  •156•1.1k•24•3•Updated Sep 25, 2025Sep 25, 2025

• ScoutSuite

  Public
  Multi-Cloud Security Auditing Tool

  awssecurityauditing+ 3

  awssecurityauditingcloudazuregcp

  Python

  •

  GNU General Public License v2.0

  •1.2k•7.6k•240•50•Updated Sep 23, 2025Sep 23, 2025

• kramdown-ts

  Public
  TypeScript

  •

  Other

  •1•0•0•0•Updated Jun 30, 2025Jun 30, 2025

• freebsd-kernel-module-rust

  Public
  Rust

  •

  BSD 2-Clause "Simplified" License

  •4•61•1•0•Updated Jun 10, 2025Jun 10, 2025

• libslub

  Public
  Python

  •

  MIT License

  •18•190•3•1•Updated Feb 8, 2025Feb 8, 2025

• chipsec

  Public
  Platform Security Assessment Framework

  Python

  •

  GNU General Public License v2.0

  •607•6•0•0•Updated Nov 24, 2024Nov 24, 2024

• cryptopals-py

  Public
  Python solutions to the Cryptopals Crypto Challenges

  pythoncryptographycryptopals

  pythoncryptographycryptopals

  Python

  •0•7•0•0•Updated Nov 20, 2024Nov 20, 2024

• nmap

  Public
  Nmap - the Network Mapper. Github mirror of official SVN repository.

  C

  •

  Other

  •2.8k•1•0•0•Updated Oct 24, 2024Oct 24, 2024

• test_avb_key

  Public
  Python

  •3•8•0•0•Updated Sep 12, 2024Sep 12, 2024

• sobelow

  Public
  Security-focused static analysis for the Phoenix Framework

  securityelixirstatic-analysis+ 1

  securityelixirstatic-analysisphoenix-framework

  Elixir

  •

  Apache License 2.0

  •118•1.8k•33•4•Updated Aug 20, 2024Aug 20, 2024

• PMapper

  Public
  A tool for quickly evaluating IAM permissions in AWS.

  pythonawsiam+ 2

  pythonawsiambotocorecloudsecurity

  Python

  •

  GNU Affero General Public License v3.0

  •195•1.5k•27•7•Updated Aug 2, 2024Aug 2, 2024

• Cartographer

  Public
  Code Coverage Exploration Plugin for Ghidra

  Java

  •

  Apache License 2.0

  •31•379•3•2•Updated Jul 19, 2024Jul 19, 2024

• cloud_ip_ranges

  Public
  Identify IP addresses owned by public cloud providers

  cloudosint

  cloudosint

  Python

  •

  MIT License

  •29•125•3•2•Updated Jul 2, 2024Jul 2, 2024

• Berserko

  Public
  Burp Suite extension to perform Kerberos authentication

  Java

  •

  GNU Affero General Public License v3.0

  •18•106•8•0•Updated Jun 28, 2024Jun 28, 2024

• LoggerPlusPlus

  Public
  Advanced Burp Suite Logging Extension

  Java

  •

  GNU Affero General Public License v3.0

  •168•697•31•4•Updated May 31, 2024May 31, 2024

• exploit_mitigations

  Public
  Knowledge base of exploit mitigations available across numerous operating systems, architectures and applications and versions.

  MIT License

  •101•923•1•0•Updated May 20, 2024May 20, 2024

• manim-cranim

  Public
  Toolkit for creating cryptographic figures and videos.

  cryptographycomputer-science-educationmanim

  cryptographycomputer-science-educationmanim

  Python

  •

  MIT License

  •3•35•0•0•Updated May 17, 2024May 17, 2024

• fips203

  Public
  Pure Rust implementation of (draft) FIPS 203 Module-Lattice-based Key-Encapsulation Mechanism Standard for server, desktop, browser and embedded applications.

  Rust

  •

  Apache License 2.0

  •1•17•0•0•Updated May 15, 2024May 15, 2024

• kubetcd

  Public
  Post-exploit a compromised etcd, gain persistence and remote shell to nodes.

  kubernetesetcd

  kubernetesetcd

  Go

  •

  Apache License 2.0

  •7•92•1•2•Updated May 7, 2024May 7, 2024

• aws-inventory

  Public
  Discover resources created in an AWS account.

  reactpythonaws

  reactpythonaws

  Python

  •

  Apache License 2.0

  •128•736•15•10•Updated Apr 5, 2024Apr 5, 2024

• autochrome

  Public
  This tool downloads, installs, and configures a shiny new copy of Chromium.

  HTML

  •

  Apache License 2.0

  •81•473•9•5•Updated Apr 3, 2024Apr 3, 2024