PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Our Favorite Tools of the Year: 2022 Edition

bishopfox.com | blog | #cloud | #open-source | #penetration-testing | #security-tools | #cloudfox | #tool-list | #unredacter
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bishop Fox's 2022 tool retrospective highlights homegrown releases—Unredacter for defeating pixelation redactions, Asminject for Linux process injection, CloudFox for cloud attack paths, and Spoofy.
Published
Collected

Related coverage

tool · github.com
Peach: Single-user, Local-first Personal Media Library and Management System
Offers a privacy-respecting, local-first alternative for media library indexing and playback, combining cloud-drive integration with automated scraping while keeping sensitive viewing data strictly local.
tool · github.com
Apple Private Cloud Compute (PCC) Security Source Code and Research Tools
Provides unprecedented source-level visibility into Apple's cloud AI infrastructure, allowing security researchers to verify cryptographic privacy guarantees and audit components eligible for Apple's PCC Security Bounty.
blog · bishopfox.com
Introducing CloudFox GCP: Attack Path Identification for Google Cloud
CloudFox GCP extends attack-path discovery to Google Cloud: enumerate resources and map IAM inheritance and service-account risk across the org hierarchy; FoxMapper adds privilege escalation chains.
blog · bishopfox.com
Unified Code, Unified Risks: Uncovering Vulnerabilities in .NET MAUI Applications
Bishop Fox shows how to bypass .NET MAUI's platform packaging to extract readable C# assemblies from Android and iOS apps, then use that shared-assembly insight to uncover critical vulnerability patterns in common business logic.
blog · bishopfox.com
Cloud Security Podcast Featuring Seth Art: Cloud Pentest of AWS
A Cloud Security Podcast interview with Seth Art on penetration testing AWS environments, why configuration reviews alone fall short, and how open-source tools like CloudFox are used in engagements.
blog · bishopfox.com
Celebrating One Year of CloudFox
Bishop Fox celebrates CloudFox's first year—new AWS and Azure commands, expanded inventory—and CloudFoxable, an intentionally vulnerable AWS environment with 18 CTF challenges that drew 200+ users.
Back