Skip to content

@FSecureLABS F-Secure LABS

Change the repository type filter

All

    Repositories list

    43 repositories

    • GWTMap

      Public
      Python
      •
      BSD 3-Clause "New" or "Revised" License
      •19•90•6•1•Updated Jun 11, 2024Jun 11, 2024

    • timeinator

      Public
      Timeinator is an extension for Burp Suite that can be used to perform timing attacks over an unreliable network such as the internet.
      Python
      •13•20•2•1•Updated May 9, 2023May 9, 2023

    • ByteConverter

      Public
      C++
      •
      BSD 3-Clause "New" or "Revised" License
      •1•2•0•0•Updated Jul 22, 2022Jul 22, 2022

    • Ellume-COVID-Test_Research-Files

      Public
      Java
      •7•11•0•0•Updated Dec 21, 2021Dec 21, 2021

    • dref

      Public
      DNS Rebinding Exploitation Framework
      iothackingpentestingiot-securityred-teamweb-hackingiot-security-testingdns-rebindingbrowser-hacking
      JavaScript
      •71•480•2•0•Updated Apr 27, 2021Apr 27, 2021

    • tapjacking-poc

      Public
      Java
      •10•27•1•1•Updated Feb 24, 2021Feb 24, 2021

    • WindVision-PoC-app

      Public
      A PoC Android application that exploits 4 vulnerabilities of the Wind Vision TV streaming application to achieve account takeover.
      Java
      •1•0•0•0•Updated Jan 21, 2021Jan 21, 2021

    • z3_and_angr_binary_analysis_workshop

      Public
      Code and exercises for a workshop on z3 and angr
      reverse-engineeringz3binary-analysissmt-solverworkshopangr
      Python
      •38•222•1•0•Updated Dec 29, 2020Dec 29, 2020

    • SharpGPOAbuse

      Public
      SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled by that GPO.
      C#
      •137•1k•6•1•Updated Dec 15, 2020Dec 15, 2020

    • CalendarPersist

      Public
      JXA script to allow programmatic persistence via macOS Calendar.app alerts.
      JavaScript
      •5•41•0•0•Updated Oct 31, 2020Oct 31, 2020

    • Re-Desk-v2.3-Vulnerabilities

      Public
      Python
      •2•1•0•0•Updated Sep 28, 2020Sep 28, 2020

    • N1QLMap

      Public
      The tool exfiltrates data from Couchbase database by exploiting N1QL injection vulnerabilities.
      Python
      •15•72•0•0•Updated Sep 2, 2020Sep 2, 2020

    • Ninjasploit

      Public
      A meterpreter extension for applying hooks to avoid windows defender memory scans
      C
      •39•234•1•1•Updated Aug 13, 2020Aug 13, 2020

    • incognito

      Public
      One Token To Rule Them All https://labs.mwrinfosecurity.com/blog/incognito-v2-0-released/
      C
      •
      Other
      •33•141•1•1•Updated Jul 9, 2020Jul 9, 2020

    • fdpasser

      Public
      Example of passing file descriptors into a container to perform a privilege escalation on the host
      C
      •4•23•0•0•Updated Jul 3, 2020Jul 3, 2020

    • SharpClipHistory

      Public
      SharpClipHistory is a .NET application written in C# that can be used to read the contents of a user's clipboard history in Windows 10 starting from the 1809 Build.
      C#
      •33•187•1•1•Updated Jan 23, 2020Jan 23, 2020

    • Cisco-UCM-SQLi-Scripts

      Public
      Scripts that can be used to exploit CVE-2019-15972 which was an Authenticated SQLi issue in Cisco Unified Call Manager (UCM).
      Python
      •8•8•0•0•Updated Nov 20, 2019Nov 20, 2019

    • SharpGPO-RemoteAccessPolicies

      Public
      A C# tool for enumerating remote access policies through group policy.
      C#
      •27•72•0•0•Updated Apr 18, 2019Apr 18, 2019

    • 3d-accelerated-exploitation

      Public
      3D Accelerated Exploitation
      C
      •8•55•0•0•Updated Feb 22, 2019Feb 22, 2019

    • Azurite

      Public
      Enumeration and reconnaissance activities in the Microsoft Azure Cloud.
      PowerShell
      •
      Other
      •71•251•5•1•Updated Feb 20, 2019Feb 20, 2019

    • ViridianFuzzer

      Public
      Kernel driver to fuzz Hyper-V hypercalls
      C++
      •45•135•0•0•Updated Feb 15, 2019Feb 15, 2019

    • XRulez

      Public
      A command line tool for creating malicious outlook rules
      C
      •
      Other
      •50•157•1•0•Updated Dec 11, 2018Dec 11, 2018

    • KernelFuzzer

      Public
      Cross Platform Kernel Fuzzer Framework
      C
      •
      Other
      •151•442•2•0•Updated Oct 11, 2018Oct 11, 2018

    • wePWNise

      Public
      WePWNise generates architecture independent VBA code to be used in Office documents or templates and automates bypassing application control and exploit mitigation software.
      Python
      •
      Other
      •96•352•1•0•Updated Aug 27, 2018Aug 27, 2018

    • win_driver_plugin

      Public
      A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers.
      Python
      •
      Other
      •121•419•2•0•Updated Aug 22, 2018Aug 22, 2018

    • CVE-2018-4121

      Public
      macOS 10.13.3 (17D47) Safari Wasm Exploit
      JavaScript
      •28•120•1•0•Updated Apr 19, 2018Apr 19, 2018

    • ExploitRemotingService

      Public
      A tool to exploit .NET Remoting Services
      C#
      •
      GNU General Public License v3.0
      •111•10•0•0•Updated Mar 2, 2018Mar 2, 2018

    • gists

      Public
      Short handy snippets from the @mwrlabs team
      PowerShell
      •9•20•0•0•Updated Jan 30, 2018Jan 30, 2018

    • bsides18_breakfree

      Public
      Example tools and output from BSides 2018 "I Want to Break Free"
      Python
      •4•7•0•0•Updated Jan 20, 2018Jan 20, 2018

    • Athena

      Public
      GUI Tool to generate threat intelligence information in various formats
      C#
      •
      Other
      •21•44•1•0•Updated Jan 18, 2018Jan 18, 2018