Nccgroup

Enumerate various traits from Windows processes as an aid to threat hunting

Automate NMAP Scans and Generate Custom Nessus Policies Automatically

Socks5/4/4a Proxy support for Remote Desktop Protocol / Terminal Services / Citrix / XenApp / XenDesktop

UPnP Pentest Toolkit for Windows

RedSnarf is a pen-testing / red-teaming tool for Windows environments

Pentester-focused Docker registry tool to enumerate and pull images

GTFOBLookup is a command line utility for offline lookups of GTFOBins, LOLBAS, WADComs, and HijackLibs.

A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.

Ghidra scripts for recovering string definitions in Go binaries

Information released publicly by NCC Group's Cyber Incident Response Team

A tool for quickly evaluating IAM permissions in AWS.

A DNS rebinding attack framework.

An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction

Multi-Cloud Security Auditing Tool

A tool designed to assist with finding all sinks and sources of a web application and display these results in a digestible manner.

Whalescan is a vulnerability scanner for Windows containers, which performs several benchmark checks, as well as checking for CVEs/vulnerable packages on the container

Tool for assessing on-premises Microsoft servers authentication such as ADFS, Skype, Exchange, and RDWeb

VisualCodeGrepper - Code security scanning tool.

Security-focused static analysis for the Phoenix Framework

A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques