46 matches found
joro
Joro Un framework de explotación web para profesionales de seguridad ofensiva. Proxy de intercepción, detección de vulnerabilidades ciegas, generación de webshells, integración con C2 y herramientas de colaboración en un solo binario con una interfaz web integrada. Advertencia: Esta herramienta...
aimap
AIMap Internet-scale discovery and security testing platform for exposed AI agent infrastructure. AIMap finds, fingerprints, and security-tests publicly exposed AI endpoints — MCP servers, Ollama instances, vLLM/LiteLLM proxies, LangServe chains, Gradio apps, ComfyUI nodes, and more. Think Shodan...
fortiweb-auth-bypass-check
FortiWeb Auth Bypass Check FortiWeb auth bypass scanner by Bishop Fox Tests a target for authentication bypass CVE-2025-64446 Only exploits a path traversal, does not exploit the actual auth bypass Does not perform any administrative actions on the target For more information about this...
You-re-Doing-IoT-RNG
Estás haciendo RNG de IoT Este repositorio contiene nuestros resultados y también el código de los dispositivos utilizado para generar los números aleatorios en varios dispositivos. Para una explicación más completa de las vulnerabilidades y problemas, echa un vistazo a nuestra charla de DEF CON ...
eyeballer
Eyeballer Échale un vistazo rápido a esas capturas de pantalla. Eyeballer está diseñado para pruebas de penetración de red de gran alcance donde necesitas encontrar objetivos "interesantes" de un gran conjunto de hosts basados en web. Utiliza tu herramienta de captura de pantalla favorita como...
SpoofcheckSelfTest
Autocomprobación de SpoofCheck Aplicación web que te permite comprobar si tu dominio es vulnerable a la suplantación de correo electrónico. NOTA: Esta aplicación aún está en desarrollo. Instalación: Esta aplicación está diseñada para usarse como servicio. Sin embargo, si quieres alojarla tú mismo...
raink
Usa LLMs para el ranqueo de documentos. Descripción Hay poder en la IA en el sentido de que puedes "lanzarle un problema" y obtener algún resultado, sin siquiera definir el problema por completo. Por ejemplo, dale un montón de diffs de código y un aviso de seguridad, y pregúntale: "¿Cuál de estos...
bfdecrypt
bfdecrypt Utility to decrypt App Store apps on jailbroken iOS 11.x Decrypt App Store apps on LiberiOS Here's an example using https://github.com/BishopFox/bfinject to decrypt the Reddit app on an Electra-jailbroken iPhone: root@kitploit: Cs-iPhone: root bash bfinject -P Reddit -l...
firecat
firecat For more info, see: http://www.bishopfox.com/resources/tools/other-free-tools/firecat/ Firecat is a penetration testing tool that allows you to punch reverse TCP tunnels out of a compromised network. After a tunnel is established, you can connect from an external host to any port on any...
local-llm-ctf
Local LLM CTF & Lab This repository is intended to be accompanied with the content at https://bishopfox.com/blog/large-language-models-llm-ctf-lab, which covers the goals of the research, explanations of the implementation, and a few results of the CTF...
ProxyListReliabilityCheck
ProxyListReliabilityCheck Perl script to test the reliability of a list of open web proxies. The script takes in a text file list of IPAddress:Port of open web proxies to test 1 per line. It then attempts to crawl to the following URL through each target proxy:...
sonicrack
Sonicrack Developed by Team X at Bishop Fox Description A tool to decrypt SonicOSX NSv firewall firmware version 7.1.1+. Run it against an OVA image first to extract keys, then it can also decrypt SIG images. Firmware can be obtained from SonicWall's support site with a valid license. Keys seem t...
zigdiggity
ZigDiggity Version 2 Introducing ZigDiggity 2.0 , a ZigBee penetration testing framework created by Matt Gleason & Francis Brown of Bishop Fox. Special thanks to Caleb Marion! ZigDiggity version 2 is a major overhaul of the original package and aims to enable cybersecurity professionals, auditors...
CVE-2023-48022
CVE-2023-48022 CVE-2023-48022 exploit modified from Bishop Fox work How to use set ip and port in jobs.py set payload in malicious.py $ pip install ray $ python3 jobs.py...
CVE-2026-32941
creationtimestamp| type| source ---|---|--- 2026-03-16 03:01:34+00:00| published-proof-of-concept| https://github.com/BishopFox/sliver/security/advisories/GHSA-97vp-pwqj-46qc 2026-08-03 11:08:45+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96405 2026-08-04 00:00:42+00:00|...
Sliver 代码问题漏洞
Sliver is an open-source, cross-platform opponent simulation/red team framework developed by Bishop Fox. It can be used by organizations of various sizes for security testing. Versions of Sliver prior to 1.7.3 have code vulnerabilities; these vulnerabilities stem from Protobuf deserialization log...
GO-2026-4445 Sliver Vulnerable to Website Path Traversal / Arbitrary File Read (Authenticated) in github.com/bishopfox/sliver
Sliver Vulnerable to Website Path Traversal / Arbitrary File Read Authenticated in github.com/bishopfox/sliver...
Exploit for CVE-2025-6980
Arista NGFW Sensitive Information Disclosure Check Arista NGF...
