Skip to content
@BishopFox

Bishop Fox

The leader in offensive security, providing continuous pen testing, red teaming, attack surface management, and traditional security assessments.

Pinned Loading

  1. sliver sliver Public

    Adversary Emulation Framework

    Go 10.8k 1.5k

  2. unredacter unredacter Public

    Never ever ever use pixelation as a redaction technique

    TypeScript 8.3k 800

  3. GitGot GitGot Public

    Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.

    Python 1.5k 217

  4. eyeballer eyeballer Public

    Convolutional neural network for analyzing pentest screenshots

    Python 1.3k 148

  5. cloudfox cloudfox Public

    Automating situational awareness for cloud penetration tests.

    Go 2.3k 223

  6. jsluice jsluice Public

    Extract URLs, paths, secrets, and other interesting bits from JavaScript

    Go 1.8k 137

Repositories

Showing 10 of 80 repositories
  • iam-vulnerable Public

    Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.

    BishopFox/iam-vulnerable’s past year of commit activity
    HCL 550 MIT 101 0 0 Updated Mar 12, 2026
  • sliver Public

    Adversary Emulation Framework

    BishopFox/sliver’s past year of commit activity
    Go 10,827 GPL-3.0 1,464 207 (3 issues need help) 5 Updated Mar 11, 2026
  • cloudfox Public

    Automating situational awareness for cloud penetration tests.

    BishopFox/cloudfox’s past year of commit activity
    Go 2,305 MIT 223 7 (1 issue needs help) 0 Updated Mar 10, 2026
  • eyeballer Public

    Convolutional neural network for analyzing pentest screenshots

    BishopFox/eyeballer’s past year of commit activity
    Python 1,279 GPL-3.0 148 6 3 Updated Mar 8, 2026
  • sj Public

    A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.

    BishopFox/sj’s past year of commit activity
    Go 748 MIT 100 4 (1 issue needs help) 0 Updated Feb 28, 2026
  • cloudfoxable Public

    Create your own vulnerable by design AWS penetration testing playground

    BishopFox/cloudfoxable’s past year of commit activity
    Python 437 MIT 51 1 0 Updated Feb 16, 2026
  • sliver-wasm-stager Public archive

    A stager and implant that executes remote Web Assembly

    BishopFox/sliver-wasm-stager’s past year of commit activity
    Rust 37 GPL-3.0 7 0 0 Updated Feb 4, 2026
  • badPods Public

    A collection of manifests that will create pods with elevated privileges.

    BishopFox/badPods’s past year of commit activity
    Shell 689 MIT 118 0 0 Updated Dec 30, 2025
  • awsservicemap Public

    Go module that returns supported regions for a service or supported services for a region

    BishopFox/awsservicemap’s past year of commit activity
    Go 18 MIT 7 0 0 Updated Dec 12, 2025
  • CVE-2025-6980-check Public

    Safely test Arista NGFW for information disclosure

    BishopFox/CVE-2025-6980-check’s past year of commit activity
    Python 3 MIT 0 0 0 Updated Dec 4, 2025
View all repositories