Repositories list

• TrainingContent

  Public
  TypeScript

  •0•0•0•0•Updated Sep 16, 2025Sep 16, 2025

• scoutmerge

  Public
  ScoutMerge is an extension for ScoutSuite allowing you to easily display results of hundreds of projects audits into a single text file.

  Python

  •

  GNU General Public License v2.0

  •1•2•0•0•Updated Jul 30, 2025Jul 30, 2025

• pyrdp

  Public
  RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact

  securityhoneypotmitm+ 4rdppentesthacktoberfestpyrdp

  Python

  •

  GNU General Public License v3.0

  •269•1.8k•52•11•Updated Jul 27, 2025Jul 27, 2025

• prompt

  Public
  AI-based implant feature

  C#

  •5•25•0•0•Updated Apr 28, 2025Apr 28, 2025

• fq-pyrdp

  Public
  fq format for parsing PyRDP replays

  Go

  •

  MIT License

  •2•6•2•0•Updated Jun 4, 2024Jun 4, 2024

• dtd-finder

  Public
  List DTDs and generate XXE payloads using those local DTDs.

  securityhacktoberfestdtd+ 1xxe

  Kotlin

  •112•643•0•1•Updated Feb 21, 2024Feb 21, 2024

• notebooks

  Public

  GoSecure/notebooks’s past year of commit activity
  Cybersecurity Research Jupyter Notebooks for the Community

  Jupyter Notebook

  •

  MIT License

  •1•2•0•0•Updated Jan 30, 2024Jan 30, 2024

• csp-evaluator

  Public
  TypeScript

  •

  Apache License 2.0

  •49•1•0•0•Updated Jan 8, 2024Jan 8, 2024

• jupyterhub-workshop-environment

  Public
  Opinionated JupyterHub deployment for workshops relying on GitHub for Authentication

  workshopjupyter-notebookjupyterhub+ 1jupyterlab

  HCL

  •

  MIT License

  •1•1•0•0•Updated Nov 13, 2023Nov 13, 2023

• jupyterhub-workshop-environment-legacy

  Public archive
  Opinionated JupyterHub deployment for workshops relying on GitHub for Authentication

  workshopjupyter-notebookjupyterhub+ 2cybersecurityjupyterlab

  Shell

  •1•1•0•0•Updated Nov 8, 2023Nov 8, 2023

• presentations

  Public
  Material from presentations done by GoSecure researchers

  securityresearchslides+ 2reveal-jspresentations

  HTML

  •15•34•0•0•Updated Oct 10, 2023Oct 10, 2023

• malware-ioc

  Public
  Indicators of Compromise (IOCs) for malware we have researched

  YARA

  •

  Other

  •3•11•0•0•Updated Aug 8, 2023Aug 8, 2023

• goinsecure-deserialization

  Public
  Accompanying material needed for the workshop

  Java

  •7•11•0•1•Updated Jun 14, 2023Jun 14, 2023

• xxe-workshop

  Public
  Workshop given at Hack in Paris 2019

  JavaScript

  •42•126•3•1•Updated Jun 8, 2023Jun 8, 2023

• Nimcrypt2

  Public
  .NET, PE, & Raw Shellcode Packer/Loader Written in Nim

  Nim

  •

  GNU General Public License v3.0

  •130•2•0•0•Updated Jan 20, 2023Jan 20, 2023

• request-smuggling-workshop

  Public
  Python

  •13•29•3•0•Updated Jan 10, 2023Jan 10, 2023

• template-injection-workshop

  Public
  Workshop on Template Injection (6 exercises) covering Twig, Jinja2, Tornado, Velocity and Freemaker engines.

  templatetwigjinja2+ 7velocityinjectiontornadofreemarkercodelabsappsecvulnerable-web-app

  CSS

  •35•129•1•0•Updated Jan 10, 2023Jan 10, 2023

• frida-xamarin-unpin

  Public
  A Frida script to bypass Xamarin certificate pinning implementations

  C#

  •29•75•4•1•Updated Jan 6, 2023Jan 6, 2023

• php7-opcache-override

  Public
  Security-related PHP7 OPcache abuse tools and demo

  php7pocvulnerability+ 1opcache

  Python

  •

  MIT License

  •75•315•1•0•Updated Jan 2, 2023Jan 2, 2023

• hack400tool

  Public
  hack400tool

  Java

  •27•2•0•0•Updated Dec 16, 2022Dec 16, 2022

• pywsus

  Public
  Standalone implementation of a part of the WSUS spec. Built for offensive security purposes.

  pythonattackwsus+ 1hacktoberfest

  Python

  •

  MIT License

  •45•333•6•2•Updated Nov 11, 2022Nov 11, 2022

• ldap-scanner

  Public
  Checks for signature requirements over LDAP

  ldaphacktoberfestntlm-relay

  Python

  •9•98•1•0•Updated Oct 11, 2022Oct 11, 2022

• Spray365

  Public
  Spray365 makes spraying Microsoft accounts (Office 365 / Azure AD) easy through its customizable two-step password spraying approach. The built-in execution pla…

  Python

  •

  MIT License

  •59•1•0•0•Updated Sep 16, 2022Sep 16, 2022

• pwndoc

  Public
  Pentest Report Generator

  JavaScript

  •

  MIT License

  •495•2•0•0•Updated Sep 8, 2022Sep 8, 2022

• missing-security-controls

  Public
  HTML

  •1•1•0•0•Updated Sep 6, 2022Sep 6, 2022

• zap-autodecode-view

  Public
  ZAP plugin demonstrating custom view for WebSocket messages.

  Kotlin

  •

  MIT License

  •4•13•2•0•Updated May 4, 2022May 4, 2022

• unicode-pentester-cheatsheet

  Public
  An easy to navigate list of unicode characters that have risky transformations 💥

  HTML

  •10•25•0•0•Updated Mar 22, 2022Mar 22, 2022

• burp-fuzzy-encoding-generator

  Public
  Quickly test various encoding for a given value in Burp Intruder

  encodingextensionburp+ 2pentestintruder

  Kotlin

  •6•7•0•0•Updated Feb 1, 2022Feb 1, 2022

• gosecure.github.io

  Public
  HTML

  •1•1•0•0•Updated Jan 20, 2022Jan 20, 2022

• peas

  Public
  PEAS is a Python 2 library and command line application for running commands on an ActiveSync server e.g. Microsoft Exchange.

  Python

  •

  Other

  •59•2•0•0•Updated Jan 10, 2022Jan 10, 2022