F-Secure LABS (@FSecureLABS)
Guthub

FSecureLABS

Twitter logo Share LinkedIn logo Share Facebook logo Share

Top repositories

1

SharpGPOAbuse

SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled by that GPO.
C#
1,017
star
2

dref

DNS Rebinding Exploitation Framework
JavaScript
482
star
3

KernelFuzzer

Cross Platform Kernel Fuzzer Framework
C
440
star
4

win_driver_plugin

A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers.
Python
417
star
5

wePWNise

WePWNise generates architecture independent VBA code to be used in Office documents or templates and automates bypassing application control and exploit mitigation software.
Python
350
star
6

OSXFuzz

macOS Kernel Fuzzer
C
249
star
7

Azurite

Enumeration and reconnaissance activities in the Microsoft Azure Cloud.
PowerShell
247
star
8

Ninjasploit

A meterpreter extension for applying hooks to avoid windows defender memory scans
C
230
star
9

z3_and_angr_binary_analysis_workshop

Code and exercises for a workshop on z3 and angr
Python
209
star
10

SharpClipHistory

SharpClipHistory is a .NET application written in C# that can be used to read the contents of a user's clipboard history in Windows 10 starting from the 1809 Build.
C#
188
star
11

XRulez

A command line tool for creating malicious outlook rules
C
156
star
12

drozer-modules

Python
139
star
13

ViridianFuzzer

Kernel driver to fuzz Hyper-V hypercalls
C++
132
star
14

incognito

One Token To Rule Them All https://labs.mwrinfosecurity.com/blog/incognito-v2-0-released/
C
129
star
15

CVE-2018-4121

macOS 10.13.3 (17D47) Safari Wasm Exploit
JavaScript
120
star
16

GWTMap

Python
90
star
17

CVE-2016-7255

An exploit for CVE-2016-7255 on Windows 7/8/8.1/10(pre-anniversary) 64 bit
C++
84
star
18

N1QLMap

The tool exfiltrates data from Couchbase database by exploiting N1QL injection vulnerabilities.
Python
72
star
19

SharpGPO-RemoteAccessPolicies

A C# tool for enumerating remote access policies through group policy.
C#
71
star
20

defcon25_uac_workshop

UAC 0Day all day!
58
star
21

3d-accelerated-exploitation

3D Accelerated Exploitation
C
55
star
22

Athena

GUI Tool to generate threat intelligence information in various formats
C#
44
star
23

honeypot_recipes

A chef cookbook which can be used to quickly deploy a high interaction honeypot, using the sysdig and falco tools
Ruby
43
star
24

needle-agent

The iOS Agent for the Needle Security Assessment Framework
Objective-C
41
star
25

CalendarPersist

JXA script to allow programmatic persistence via macOS Calendar.app alerts.
JavaScript
41
star
26

coralsun

macOS Cython IOKit Utility Library
Python
40
star
27

avrop

ROP based Movfuscator VM
Assembly
29
star
28

mercury-modules

Extra modules for the Mercury Android Security Assessment Framework.
Python
25
star
29

jASMin

Python
24
star
30

fdpasser

Example of passing file descriptors into a container to perform a privilege escalation on the host
C
23
star
31

tapjacking-poc

Java
23
star
32

fingertec-tool

A tool for communicating with FingerTec access control devices, as well as other ZKTeco based devices
Python
21
star
33

gists

Short handy snippets from the @mwrlabs team
PowerShell
20
star
34

timeinator

Timeinator is an extension for Burp Suite that can be used to perform timing attacks over an unreliable network such as the internet.
Python
20
star
35

weasel

C
19
star
36

veripy

a network-centric compliance testing framework for verifying the operation of network equipment against the RFCs specified in ripe-554
Python
12
star
37

Ellume-COVID-Test_Research-Files

Java
11
star
38

jar-agent

Java
9
star
39

mercury-common

This repository contains Mercury components that are shared between the Agent and the Server/Console.
9
star
40

mwr-tls

A collection of utilities for interacting with SSL and X509 Certificates on Android.
Java
8
star
41

bsides18_breakfree

Example tools and output from BSides 2018 "I Want to Break Free"
Python
7
star
42

Cisco-UCM-SQLi-Scripts

Scripts that can be used to exploit CVE-2019-15972 which was an Authenticated SQLi issue in Cisco Unified Call Manager (UCM).
Python
7
star
43

rogue-agent

Java
5
star
44

ByteConverter

C++
1
star
45

Re-Desk-v2.3-Vulnerabilities

Python
1
star