Repositories list

• sliver

  Public
  Adversary Emulation Framework

  dnsgolanghttp+ 12

  dnsgolanghttpgplv3dns-serversliverred-teamsecurity-toolsc2red-team-engagement+ 5

  Go

  •

  GNU General Public License v3.0

  •1.6k1.6k forks•12k12k stars•203203 issues•2323 pull requests•Updated Aug 25, 2026Aug 25, 2026

• CVE-2026-58073-check

  Public
  Safely detect Veeam Service Provider Console auth bypass CVE-2026-58073

  Python

  •

  MIT License

  •00 forks•00 stars•00 issues•00 pull requests•Updated Aug 25, 2026Aug 25, 2026

• sj

  Public
  A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.

  Go

  •

  MIT License

  •113113 forks•872872 stars•33 issues•00 pull requests•Updated Aug 24, 2026Aug 24, 2026

• joro

  Public
  A collaborative web exploitation framework.

  mss-delivery-ops

  mss-delivery-ops

  Go

  •

  GNU General Public License v3.0

  •22 forks•4040 stars•00 issues•00 pull requests•Updated Aug 24, 2026Aug 24, 2026

• cirro

  Public

  BishopFox/cirro’s past year of commit activity
  Creating attacks paths across management and data planes

  Rust

  •

  GNU General Public License v3.0

  •44 forks•6464 stars•00 issues•00 pull requests•Updated Aug 24, 2026Aug 24, 2026

• cloudfox

  Public
  Automating situational awareness for cloud penetration tests.

  golangawssecurity+ 3

  golangawssecuritycloudcloud-securitypenetration-testing-tools

  Go

  •

  MIT License

  •254254 forks•2.6k2.6k stars•77 issues•33 pull requests•Updated Aug 20, 2026Aug 20, 2026

• CVE-2026-8452-check

  Public
  Safely detect Citrix NetScaler CVE-2026-8452

  Python

  •

  MIT License

  •00 forks•11 star•00 issues•00 pull requests•Updated Aug 20, 2026Aug 20, 2026

• cirrodash

  Public
  Dashboard for Cirro

  TypeScript

  •

  GNU General Public License v3.0

  •11 fork•1515 stars•00 issues•00 pull requests•Updated Aug 7, 2026Aug 7, 2026

• CVE-2026-11374-check

  Public
  Detection script for CVE-2026-11374

  Python

  •

  MIT License

  •00 forks•11 star•00 issues•00 pull requests•Updated Jul 23, 2026Jul 23, 2026

• snowpick

  Public
  find sensitive data leaking from ServiceNow instances.

  Go

  •

  MIT License

  •00 forks•1717 stars•00 issues•00 pull requests•Updated Jul 14, 2026Jul 14, 2026

• sparkplugFuzzer

  Public

  BishopFox/sparkplugFuzzer’s past year of commit activity
  Fuzzer for the Sparkplug B IIoT protocol

  Python

  •

  MIT License

  •00 forks•11 star•00 issues•11 pull request•Updated Jul 8, 2026Jul 8, 2026

• Favicons

  Public

  BishopFox/Favicons’s past year of commit activity
  Public Data Set of AI Favicon WorkFlow Output

  Python

  •

  MIT License

  •22 forks•1515 stars•00 issues•00 pull requests•Updated Jul 1, 2026Jul 1, 2026

• CVE-2026-28318-check

  Public

  BishopFox/CVE-2026-28318-check’s past year of commit activity
  Safely detect whether a SolarWinds Serv-U host is vulnerable to CVE-2026-28318

  Python

  •

  MIT License

  •22 forks•22 stars•00 issues•00 pull requests•Updated Jun 12, 2026Jun 12, 2026

• exchange-scanner

  Public
  Identify public-facing Microsoft Exchange servers and determine their software versions

  Python

  •

  GNU General Public License v3.0

  •00 forks•11 star•00 issues•00 pull requests•Updated Jun 12, 2026Jun 12, 2026

• CVE-2026-34908-check

  Public
  Safely detect whether a UniFi OS Server is vulnerable to CVE-2026-34908

  Python

  •

  MIT License

  •44 forks•6666 stars•00 issues•00 pull requests•Updated Jun 5, 2026Jun 5, 2026

• CVE-2026-22557-check

  Public
  Safely detect whether a UniFi Network Application controller is vulnerable to CVE-2026-22557

  Python

  •

  MIT License

  •00 forks•11 star•00 issues•00 pull requests•Updated Jun 1, 2026Jun 1, 2026

• CVE-2026-0265-check

  Public
  Safely detect whether a PAN-OS target is vulnerable to CVE-2026-0265.

  Python

  •

  MIT License

  •00 forks•22 stars•00 issues•00 pull requests•Updated May 22, 2026May 22, 2026

• CVE-2026-27886-check

  Public
  Detect whether a Strapi instance is vulnerable to CVE-2026-27886 (unauthenticated boolean-oracle exfiltration of administrator secrets).

  Python

  •

  MIT License

  •11 fork•11 star•00 issues•00 pull requests•Updated May 22, 2026May 22, 2026

• cloudfoxable

  Public
  Create your own vulnerable by design AWS penetration testing playground

  Python

  •

  MIT License

  •5252 forks•469469 stars•11 issue•00 pull requests•Updated May 1, 2026May 1, 2026

• aimap

  Public
  Discover Exposed AI Services

  Python

  •

  MIT License

  •5050 forks•349349 stars•11 issue•44 pull requests•Updated Apr 28, 2026Apr 28, 2026

• otto-support

  Public
  An implementation of a vulnerable MCP server using mcp-go

  Go

  •

  GNU General Public License v3.0

  •00 forks•1919 stars•00 issues•00 pull requests•Updated Apr 21, 2026Apr 21, 2026

• install-aws-cli-action

  Public
  Install AWS CLI on a GitHub Actions Linux host

  Shell

  •

  MIT License

  •3939 forks•22 stars•00 issues•00 pull requests•Updated Apr 13, 2026Apr 13, 2026

• cirro-azcli-ext

  Public
  Azure CLI extension for Cirro collection

  Python

  •

  Apache License 2.0

  •11 fork•88 stars•00 issues•00 pull requests•Updated Apr 10, 2026Apr 10, 2026

• aws-signing

  Public
  CLI that allows user to submit http requests using AWS request signing

  engineering

  engineering

  Go

  •

  MIT License

  •77 forks•66 stars•00 issues•00 pull requests•Updated Apr 10, 2026Apr 10, 2026

• CVE-2026-35616-check

  Public
  Python

  •

  MIT License

  •00 forks•22 stars•00 issues•00 pull requests•Updated Apr 6, 2026Apr 6, 2026

• CVE-2026-25075-check

  Public
  Python

  •

  MIT License

  •00 forks•22 stars•00 issues•00 pull requests•Updated Mar 26, 2026Mar 26, 2026

• iam-vulnerable

  Public
  Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.

  HCL

  •

  MIT License

  •107107 forks•589589 stars•00 issues•00 pull requests•Updated Mar 12, 2026Mar 12, 2026

• eyeballer

  Public
  Convolutional neural network for analyzing pentest screenshots

  pythonmachine-learningai+ 3

  pythonmachine-learningaitensorflowsecurity-toolspentesting-tools

  Python

  •

  GNU General Public License v3.0

  •148148 forks•1.3k1.3k stars•66 issues•33 pull requests•Updated Mar 8, 2026Mar 8, 2026

• badPods

  Public
  A collection of manifests that will create pods with elevated privileges.

  kubernetessecurityassessment+ 9

  kubernetessecurityassessmentpenetration-testingexploitationpodspecpodsprivilegedhostpathhostpid+ 2

  Shell

  •

  MIT License

  •118118 forks•709709 stars•00 issues•00 pull requests•Updated Dec 30, 2025Dec 30, 2025

• awsservicemap

  Public
  Go module that returns supported regions for a service or supported services for a region

  Go

  •

  MIT License

  •66 forks•1818 stars•00 issues•00 pull requests•Updated Dec 12, 2025Dec 12, 2025