nccgroup Goto Github PK

libdlmalloc

Heap analysis tooling for dlmalloc

liblapith

A really simple Nessus results library

libmempool

Heap analysis tooling for mempool

libptmalloc

Heap analysis tooling for ptmalloc

libtalloc

libtalloc is a python script for use with GDB that can be used to analyse the "trivial allocator" (talloc)

lightweight_static_analysis

Create useful, lightweight static analyses using open source tools + a tiny bit of your code

listips

A script that uses nmap to expand IP ranges into a list of IPs

log4j-jndi-be-gone

A Byte Buddy Java agent-based fix for CVE-2021-44228, the log4j 2.x "JNDI LDAP" vulnerability.

loggerplusplus

Advanced Burp Suite Logging Extension

loki

LOKI (Limited Obstructive Keyboard Impersonator) is a RDP File Transfer Tool Using Keypresses

matt.net

Matt.Net is a simple GUI wrapper around Microsoft's CAT.NET Code Auditing Tool

memaddressanalysis

Research project related to memory address analysis

memgrep

Memory searching utilities

memscan

Searches for strings, regex, credit card numbers of magnetic stripe card tracks in a Windows process's memory space

metasploitavevasion

Metasploit AV Evasion Tool

mimikatz-detector-busylight

USB HID driver emulation with PID/VID (0x3bca/0x27bb) of Plenom A/S Busylight Alpha, that is supported by Mimikatz. When mimikatz is executed, a thread is spwaned by default that tries to locate one of the busylights that is supported. All HID devices are enumerated, if PID/VID is matching then packets are sent to flash the busylight in different colours.

mimikatz-detector-condrv

The Console Monitor Driver is a KMDF kernel-mode filter driver that captures certain Fast I/O operations (input and output) that is sent to or from the ConDrv. ConDrv is a device created by condrv.sys, which handles the traffic between the Console Application (cmd/powershell/etc) and the actual console (conhost.exe).

ml-for-rngs

mnemosyne

A Generic Windows Memory Scraping Tool

mortimer

A collection of scripts for processing network forensics type data and intelligence, mainly into a postgres database.

ncccodenavi

NCC Code Navigator

nccfsas

Information released publicly by NCC Group's Full Spectrum Attack Simulation (FSAS) team.

nccgroup.github.io

github.io repo

nccopensourcepolicy

NCC Group's Open Source Policy as open source

ncloader

A session-0 capable dll injection utility

nlahoney

NLA Honeypot Associated Research

nlist

An nmap script to produce target lists for use with various tools.

nmap-nse-vulnerability-scripts

NMAP Vulnerability Scanning Scripts

nobex

nOBEX allows emulating the PBAP, MAP, and HFP profiles to test vehicle infotainment systems and similar devices using these profiles

node-saml

SAML assertion creation for node