Skip to content

@BishopFox Bishop Fox

Change the repository type filter

All

    Repositories list

    97 repositories

    • cloudfox

      Public
      Automating situational awareness for cloud penetration tests.
      golangawssecurity
      golangawssecuritycloudcloud-securitypenetration-testing-tools
      Go
      •
      MIT License
      •255•2.6k•7•3•Updated Aug 20, 2026Aug 20, 2026

    • sliver

      Public
      Adversary Emulation Framework
      dnsgolanghttp
      dnsgolanghttpgplv3dns-serversliverred-teamsecurity-toolsc2red-team-engagement
      Go
      •
      GNU General Public License v3.0
      •1.6k•12k•201•16•Updated Aug 19, 2026Aug 19, 2026

    • sj

      Public
      A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.
      Go
      •
      MIT License
      •113•871•3•1•Updated Aug 19, 2026Aug 19, 2026

    • joro

      Public
      A collaborative web exploitation framework.
      mss-delivery-ops
      mss-delivery-ops
      Go
      •
      GNU General Public License v3.0
      •3•39•0•0•Updated Aug 18, 2026Aug 18, 2026

    • cirrodash

      Public
      Dashboard for Cirro
      TypeScript
      •
      GNU General Public License v3.0
      •1•15•0•0•Updated Aug 7, 2026Aug 7, 2026

    • cirro

      Public
      Creating attacks paths across management and data planes
      Rust
      •
      GNU General Public License v3.0
      •4•64•0•0•Updated Jul 28, 2026Jul 28, 2026

    • CVE-2026-11374-check

      Public
      Detection script for CVE-2026-11374
      Python
      •
      MIT License
      •0•1•0•0•Updated Jul 23, 2026Jul 23, 2026

    • snowpick

      Public
      find sensitive data leaking from ServiceNow instances.
      Go
      •
      MIT License
      •0•15•0•0•Updated Jul 14, 2026Jul 14, 2026

    • sparkplugFuzzer

      Public
      Fuzzer for the Sparkplug B IIoT protocol
      Python
      •
      MIT License
      •0•1•0•1•Updated Jul 8, 2026Jul 8, 2026

    • Favicons

      Public
      Public Data Set of AI Favicon WorkFlow Output
      Python
      •
      MIT License
      •2•15•0•0•Updated Jul 1, 2026Jul 1, 2026

    • CVE-2026-28318-check

      Public
      Safely detect whether a SolarWinds Serv-U host is vulnerable to CVE-2026-28318
      Python
      •
      MIT License
      •2•2•0•0•Updated Jun 12, 2026Jun 12, 2026

    • exchange-scanner

      Public
      Identify public-facing Microsoft Exchange servers and determine their software versions
      Python
      •
      GNU General Public License v3.0
      •0•1•0•0•Updated Jun 12, 2026Jun 12, 2026

    • CVE-2026-34908-check

      Public
      Safely detect whether a UniFi OS Server is vulnerable to CVE-2026-34908
      Python
      •
      MIT License
      •4•66•0•0•Updated Jun 5, 2026Jun 5, 2026

    • CVE-2026-22557-check

      Public
      Safely detect whether a UniFi Network Application controller is vulnerable to CVE-2026-22557
      Python
      •
      MIT License
      •0•1•0•0•Updated Jun 1, 2026Jun 1, 2026

    • CVE-2026-0265-check

      Public
      Safely detect whether a PAN-OS target is vulnerable to CVE-2026-0265.
      Python
      •
      MIT License
      •0•2•0•0•Updated May 22, 2026May 22, 2026

    • CVE-2026-27886-check

      Public
      Detect whether a Strapi instance is vulnerable to CVE-2026-27886 (unauthenticated boolean-oracle exfiltration of administrator secrets).
      Python
      •
      MIT License
      •1•1•0•0•Updated May 22, 2026May 22, 2026

    • cloudfoxable

      Public
      Create your own vulnerable by design AWS penetration testing playground
      Python
      •
      MIT License
      •52•469•1•0•Updated May 1, 2026May 1, 2026

    • aimap

      Public
      Discover Exposed AI Services
      Python
      •
      MIT License
      •50•337•1•4•Updated Apr 28, 2026Apr 28, 2026

    • otto-support

      Public
      An implementation of a vulnerable MCP server using mcp-go
      Go
      •
      GNU General Public License v3.0
      •0•19•0•0•Updated Apr 21, 2026Apr 21, 2026

    • install-aws-cli-action

      Public
      Install AWS CLI on a GitHub Actions Linux host
      Shell
      •
      MIT License
      •40•2•0•0•Updated Apr 13, 2026Apr 13, 2026

    • cirro-azcli-ext

      Public
      Azure CLI extension for Cirro collection
      Python
      •
      Apache License 2.0
      •1•8•0•0•Updated Apr 10, 2026Apr 10, 2026

    • aws-signing

      Public
      CLI that allows user to submit http requests using AWS request signing
      engineering
      engineering
      Go
      •
      MIT License
      •7•6•0•0•Updated Apr 10, 2026Apr 10, 2026

    • CVE-2026-35616-check

      Public
      Python
      •
      MIT License
      •0•2•0•0•Updated Apr 6, 2026Apr 6, 2026

    • CVE-2026-25075-check

      Public
      Python
      •
      MIT License
      •0•2•0•0•Updated Mar 26, 2026Mar 26, 2026

    • iam-vulnerable

      Public
      Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.
      HCL
      •
      MIT License
      •107•587•0•0•Updated Mar 12, 2026Mar 12, 2026

    • eyeballer

      Public
      Convolutional neural network for analyzing pentest screenshots
      pythonmachine-learningai
      pythonmachine-learningaitensorflowsecurity-toolspentesting-tools
      Python
      •
      GNU General Public License v3.0
      •149•1.3k•6•3•Updated Mar 8, 2026Mar 8, 2026

    • badPods

      Public
      A collection of manifests that will create pods with elevated privileges.
      kubernetessecurityassessment
      kubernetessecurityassessmentpenetration-testingexploitationpodspecpodsprivilegedhostpathhostpid
      Shell
      •
      MIT License
      •118•709•0•0•Updated Dec 30, 2025Dec 30, 2025

    • awsservicemap

      Public
      Go module that returns supported regions for a service or supported services for a region
      Go
      •
      MIT License
      •6•18•0•0•Updated Dec 12, 2025Dec 12, 2025

    • CVE-2025-6980-check

      Public
      Safely test Arista NGFW for information disclosure
      Python
      •
      MIT License
      •0•3•0•0•Updated Dec 4, 2025Dec 4, 2025

    • fortiweb-auth-bypass-check

      Public
      Python
      •
      MIT License
      •0•5•0•0•Updated Dec 3, 2025Dec 3, 2025
    ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.