Repositories list

• SteppingStones

  Public

  nccgroup/SteppingStones’s past year of commit activity
  A Red Team Activity Hub

  bloodhoundrecordingcobalt-strike+ 2red-teamcracking-hashes

  Python

  •

  Apache License 2.0

  •35•235•5•0•Updated Dec 17, 2025Dec 17, 2025

• singularity

  Public
  A DNS rebinding attack framework.

  dnsiotattack+ 2vulnerabilitydns-rebinding

  JavaScript

  •

  MIT License

  •157•1.2k•12•2•Updated Dec 4, 2025Dec 4, 2025

• ghostrings

  Public

  nccgroup/ghostrings’s past year of commit activity
  Ghidra scripts for recovering string definitions in Go binaries

  gogolangreverse-engineering+ 3ghidraghidra-extensionghidra-scripts

  Java

  •

  GNU General Public License v3.0

  •9•126•0•0•Updated Nov 25, 2025Nov 25, 2025

• mtk_bp

  Public

  nccgroup/mtk_bp’s past year of commit activity
  MediaTek BP firmware tools

  mediatekreverse-engineeringbaseband

  Python

  •

  GNU General Public License v3.0

  •18•67•0•1•Updated Nov 13, 2025Nov 13, 2025

• http-mcp-bridge

  Public
  Python

  •

  MIT License

  •0•14•0•0•Updated Nov 13, 2025Nov 13, 2025

• ghidra-nanomips

  Public
  nanoMIPS module for Ghidra

  reverse-engineeringghidraghidra-plugin+ 2ghidra-extensionnanomips

  Python

  •

  GNU General Public License v3.0

  •11•54•0•0•Updated Nov 6, 2025Nov 6, 2025

• phantap

  Public
  Phantom Tap (PhanTap) - an ‘invisible’ network tap aimed at red teams

  C

  •

  GNU General Public License v3.0

  •81•616•6•0•Updated Oct 6, 2025Oct 6, 2025

• Sniffle

  Public

  nccgroup/Sniffle’s past year of commit activity
  A sniffer for Bluetooth 5 and 4.x LE

  snifferbluetoothble

  Python

  •

  GNU General Public License v3.0

  •151•1.1k•23•3•Updated Sep 25, 2025Sep 25, 2025

• ScoutSuite

  Public
  Multi-Cloud Security Auditing Tool

  awssecurityauditing+ 3cloudazuregcp

  Python

  •

  GNU General Public License v2.0

  •1.2k•7.5k•239•47•Updated Sep 23, 2025Sep 23, 2025

• powerg-tools

  Public

  nccgroup/powerg-tools’s past year of commit activity
  Tools for reverse engineering and interacting with the PowerG radio protocol

  reverse-engineeringsdrhackrf+ 1powerg

  Python

  •

  GNU General Public License v3.0

  •0•3•0•0•Updated Sep 16, 2025Sep 16, 2025

• kramdown-ts

  Public
  TypeScript

  •

  Other

  •1•0•0•0•Updated Jun 30, 2025Jun 30, 2025

• blackboxprotobuf

  Public
  Blackbox Protobuf is a set of tools for working with encoded Protocol Buffers (protobuf) without the matching protobuf definition.

  protobufburp

  Python

  •

  MIT License

  •110•683•7•3•Updated Jun 17, 2025Jun 17, 2025

• freebsd-kernel-module-rust

  Public
  Rust

  •

  BSD 2-Clause "Simplified" License

  •4•61•1•0•Updated Jun 10, 2025Jun 10, 2025

• libslub

  Public
  Python

  •

  MIT License

  •18•189•3•1•Updated Feb 8, 2025Feb 8, 2025

• chipsec

  Public
  Platform Security Assessment Framework

  Python

  •

  GNU General Public License v2.0

  •604•5•0•0•Updated Nov 24, 2024Nov 24, 2024

• cryptopals-py

  Public
  Python solutions to the Cryptopals Crypto Challenges

  pythoncryptographycryptopals

  Python

  •0•7•0•0•Updated Nov 20, 2024Nov 20, 2024

• nmap

  Public
  Nmap - the Network Mapper. Github mirror of official SVN repository.

  C

  •

  Other

  •2.7k•2•0•0•Updated Oct 24, 2024Oct 24, 2024

• test_avb_key

  Public
  Python

  •3•8•0•0•Updated Sep 12, 2024Sep 12, 2024

• sobelow

  Public
  Security-focused static analysis for the Phoenix Framework

  securityelixirstatic-analysis+ 1phoenix-framework

  Elixir

  •

  Apache License 2.0

  •116•1.8k•33•4•Updated Aug 20, 2024Aug 20, 2024

• PMapper

  Public
  A tool for quickly evaluating IAM permissions in AWS.

  pythonawsiam+ 2botocorecloudsecurity

  Python

  •

  GNU Affero General Public License v3.0

  •189•1.5k•27•6•Updated Aug 2, 2024Aug 2, 2024

• Cartographer

  Public
  Code Coverage Exploration Plugin for Ghidra

  Java

  •

  Apache License 2.0

  •31•372•3•2•Updated Jul 19, 2024Jul 19, 2024

• cloud_ip_ranges

  Public
  Identify IP addresses owned by public cloud providers

  cloudosint

  Python

  •

  MIT License

  •29•126•4•2•Updated Jul 2, 2024Jul 2, 2024

• Berserko

  Public
  Burp Suite extension to perform Kerberos authentication

  Java

  •

  GNU Affero General Public License v3.0

  •16•106•8•0•Updated Jun 28, 2024Jun 28, 2024

• LoggerPlusPlus

  Public
  Advanced Burp Suite Logging Extension

  Java

  •

  GNU Affero General Public License v3.0

  •168•686•31•4•Updated May 31, 2024May 31, 2024

• exploit_mitigations

  Public
  Knowledge base of exploit mitigations available across numerous operating systems, architectures and applications and versions.

  MIT License

  •100•920•1•0•Updated May 20, 2024May 20, 2024

• manim-cranim

  Public
  Toolkit for creating cryptographic figures and videos.

  cryptographycomputer-science-educationmanim

  Python

  •

  MIT License

  •2•35•0•0•Updated May 17, 2024May 17, 2024

• fips203

  Public
  Pure Rust implementation of (draft) FIPS 203 Module-Lattice-based Key-Encapsulation Mechanism Standard for server, desktop, browser and embedded applications.

  Rust

  •

  Apache License 2.0

  •1•17•0•0•Updated May 15, 2024May 15, 2024

• kubetcd

  Public
  Post-exploit a compromised etcd, gain persistence and remote shell to nodes.

  kubernetesetcd

  Go

  •

  Apache License 2.0

  •7•90•1•2•Updated May 7, 2024May 7, 2024

• aws-inventory

  Public
  Discover resources created in an AWS account.

  reactpythonaws

  Python

  •

  Apache License 2.0

  •130•729•15•10•Updated Apr 5, 2024Apr 5, 2024

• autochrome

  Public
  This tool downloads, installs, and configures a shiny new copy of Chromium.

  HTML

  •

  Apache License 2.0

  •80•470•8•5•Updated Apr 3, 2024Apr 3, 2024