Repositories list

• otto-support

  Public

  BishopFox/otto-support’s past year of commit activity
  An implementation of a vulnerable MCP server using mcp-go

  Go

  •

  GNU General Public License v3.0

  •00 forks•00 stars•00 issues•00 pull requests•Updated Apr 21, 2026Apr 21, 2026

• cloudfox

  Public

  BishopFox/cloudfox’s past year of commit activity
  Automating situational awareness for cloud penetration tests.

  golangawssecurity+ 3

  golangawssecuritycloudcloud-securitypenetration-testing-tools

  Go

  •

  MIT License

  •227227 forks•2.3k2.3k stars•66 issues•11 pull request•Updated Apr 21, 2026Apr 21, 2026

• sliver

  Public

  BishopFox/sliver’s past year of commit activity
  Adversary Emulation Framework

  dnsgolanghttp+ 12

  dnsgolanghttpgplv3dns-serversliverred-teamsecurity-toolsc2red-team-engagement+ 5

  Go

  •

  GNU General Public License v3.0

  •1.5k1.5k forks•11k11k stars•198198 issues•66 pull requests•Updated Apr 19, 2026Apr 19, 2026

• cirro

  Public

  BishopFox/cirro’s past year of commit activity
  Creating attacks paths across management and data planes

  Rust

  •

  GNU General Public License v3.0

  •11 fork•4444 stars•11 issue•00 pull requests•Updated Apr 13, 2026Apr 13, 2026

• install-aws-cli-action

  Public

  BishopFox/install-aws-cli-action’s past year of commit activity
  Install AWS CLI on a GitHub Actions Linux host

  Shell

  •

  MIT License

  •3939 forks•22 stars•00 issues•00 pull requests•Updated Apr 13, 2026Apr 13, 2026

• cirro-azcli-ext

  Public

  BishopFox/cirro-azcli-ext’s past year of commit activity
  Azure CLI extension for Cirro collection

  Python

  •

  Apache License 2.0

  •11 fork•66 stars•00 issues•00 pull requests•Updated Apr 10, 2026Apr 10, 2026

• aws-signing

  Public

  BishopFox/aws-signing’s past year of commit activity
  CLI that allows user to submit http requests using AWS request signing

  engineering

  engineering

  Go

  •

  MIT License

  •77 forks•66 stars•00 issues•00 pull requests•Updated Apr 10, 2026Apr 10, 2026

• cirrodash

  Public

  BishopFox/cirrodash’s past year of commit activity
  Dashboard for Cirro

  TypeScript

  •

  GNU General Public License v3.0

  •11 fork•1111 stars•00 issues•00 pull requests•Updated Apr 7, 2026Apr 7, 2026

• CVE-2026-35616-check

  Public

  BishopFox/CVE-2026-35616-check’s past year of commit activity
  Python

  •

  MIT License

  •00 forks•11 star•00 issues•00 pull requests•Updated Apr 6, 2026Apr 6, 2026

• CVE-2026-25075-check

  Public

  BishopFox/CVE-2026-25075-check’s past year of commit activity
  Python

  •

  MIT License

  •00 forks•22 stars•00 issues•00 pull requests•Updated Mar 26, 2026Mar 26, 2026

• sj

  Public

  BishopFox/sj’s past year of commit activity
  A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.

  Go

  •

  MIT License

  •110110 forks•841841 stars•33 issues•00 pull requests•Updated Mar 24, 2026Mar 24, 2026

• iam-vulnerable

  Public

  BishopFox/iam-vulnerable’s past year of commit activity
  Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.

  HCL

  •

  MIT License

  •104104 forks•563563 stars•00 issues•00 pull requests•Updated Mar 12, 2026Mar 12, 2026

• eyeballer

  Public
  Convolutional neural network for analyzing pentest screenshots

  pythonmachine-learningai+ 3

  pythonmachine-learningaitensorflowsecurity-toolspentesting-tools

  Python

  •

  GNU General Public License v3.0

  •146146 forks•1.3k1.3k stars•66 issues•33 pull requests•Updated Mar 8, 2026Mar 8, 2026

• cloudfoxable

  Public

  BishopFox/cloudfoxable’s past year of commit activity
  Create your own vulnerable by design AWS penetration testing playground

  Python

  •

  MIT License

  •5151 forks•441441 stars•11 issue•00 pull requests•Updated Feb 16, 2026Feb 16, 2026

• sliver-wasm-stager

  Public archive

  BishopFox/sliver-wasm-stager’s past year of commit activity
  A stager and implant that executes remote Web Assembly

  Rust

  •

  GNU General Public License v3.0

  •1010 forks•6464 stars•00 issues•00 pull requests•Updated Feb 4, 2026Feb 4, 2026

• badPods

  Public

  BishopFox/badPods’s past year of commit activity
  A collection of manifests that will create pods with elevated privileges.

  kubernetessecurityassessment+ 9

  kubernetessecurityassessmentpenetration-testingexploitationpodspecpodsprivilegedhostpathhostpid+ 2

  Shell

  •

  MIT License

  •119119 forks•693693 stars•00 issues•00 pull requests•Updated Dec 30, 2025Dec 30, 2025

• awsservicemap

  Public

  BishopFox/awsservicemap’s past year of commit activity
  Go module that returns supported regions for a service or supported services for a region

  Go

  •

  MIT License

  •66 forks•1818 stars•00 issues•00 pull requests•Updated Dec 12, 2025Dec 12, 2025

• CVE-2025-6980-check

  Public
  Safely test Arista NGFW for information disclosure

  Python

  •

  MIT License

  •00 forks•33 stars•00 issues•00 pull requests•Updated Dec 4, 2025Dec 4, 2025

• fortiweb-auth-bypass-check

  Public
  Python

  •

  MIT License

  •00 forks•55 stars•00 issues•00 pull requests•Updated Dec 3, 2025Dec 3, 2025

• shining-mask

  Public

  BishopFox/shining-mask’s past year of commit activity
  Python

  •00 forks•1212 stars•00 issues•00 pull requests•Updated Oct 30, 2025Oct 30, 2025

• raink

  Public
  Use LLMs for document ranking

  Go

  •

  MIT License

  •66 forks•169169 stars•11 issue•00 pull requests•Updated Apr 17, 2025Apr 17, 2025

• sonicrack

  Public
  Decrypt encrypted SonicOSX firmware images

  Python

  •

  GNU General Public License v3.0

  •33 forks•1919 stars•00 issues•00 pull requests•Updated Feb 24, 2025Feb 24, 2025

• BrokenHill

  Public

  BishopFox/BrokenHill’s past year of commit activity
  A productionized greedy coordinate gradient (GCG) attack tool for large language models (LLMs)

  Python

  •

  MIT License

  •2323 forks•159159 stars•11 issue•11 pull request•Updated Dec 18, 2024Dec 18, 2024

• local-llm-ctf

  Public

  BishopFox/local-llm-ctf’s past year of commit activity
  A small go harness that uses Ollama to orchestrate LLMs in a restricted process flow

  Go

  •

  MIT License

  •00 forks•1717 stars•00 issues•00 pull requests•Updated Sep 10, 2024Sep 10, 2024

• cve-2024-21762-check

  Public
  Safely detect whether a FortiGate SSL VPN is vulnerable to CVE-2024-21762

  Python

  •

  GNU General Public License v3.0

  •1717 forks•108108 stars•33 issues•11 pull request•Updated Jul 5, 2024Jul 5, 2024

• jsluice

  Public

  BishopFox/jsluice’s past year of commit activity
  Extract URLs, paths, secrets, and other interesting bits from JavaScript

  javascriptsecurity

  javascriptsecurity

  Go

  •

  MIT License

  •137137 forks•1.8k1.8k stars•77 issues•22 pull requests•Updated May 22, 2024May 22, 2024

• gcp-terraform-cloud-connector

  Public

  BishopFox/gcp-terraform-cloud-connector’s past year of commit activity
  This repo provides a terraform module for customers looking to implement Google Cloud connector support for Bishop Fox Cosmos

  HCL

  •

  Apache License 2.0

  •00 forks•11 star•00 issues•00 pull requests•Updated May 20, 2024May 20, 2024

• CVE-2023-27997-check

  Public

  BishopFox/CVE-2023-27997-check’s past year of commit activity
  Safely detect whether a FortiGate SSL VPN instance is vulnerable to CVE-2023-27997 based on response timing

  Python

  •

  GNU General Public License v3.0

  •2424 forks•135135 stars•00 issues•00 pull requests•Updated May 8, 2024May 8, 2024

• unredacter

  Public
  Never ever ever use pixelation as a redaction technique

  TypeScript

  •

  GNU General Public License v3.0

  •800800 forks•8.3k8.3k stars•2222 issues•1313 pull requests•Updated Mar 15, 2024Mar 15, 2024

• GitGot

  Public

  BishopFox/GitGot’s past year of commit activity
  Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.

  pythongithub-apisecurity+ 9

  pythongithub-apisecurityosintfuzzy-matchingrecongistssecurity-scannersecurity-toolsreconnaissance+ 2

  Python

  •

  GNU Lesser General Public License v3.0

  •217217 forks•1.6k1.6k stars•33 issues•00 pull requests•Updated Mar 7, 2024Mar 7, 2024