Name: CiscoCXSecurityLabs
Type: Organization
Bio: Cisco CX Security Labs is the security R&D arm of @Cisco's professional services CX organisation including combined output of @portcullislabs and @Neohapsis
Twitter: CiscoCXSecurity
Location: US, EMEAR, APJC
CiscoCXSecurityLabs's Projects
Demo outline and code example from my ISE REST API webinar on 20210406 with additional examples for curl and Python not covered in the webinar.
acccheck is a Perl script is designed as a password dictionary attack tool that targets windows authentication via the SMB protocol
allthevhosts is a tool to scrape a series of web applications (including Bing and You Get Signal’s database) and looks at Subject Alternative Names in the SSL certificate to find as many web applications which resolve to an IP address as possible
AMES is a tool to parse the new Nessus output files and autogenerate an easy to copy and paste command line exploit using Metasploit CLI
Cisco AMP policy assessment kit
Cisco AMP threat hunting scripts
apache-users is a Perl script for finding user home directories that are exposed from Apache web server
BannerGrab is a tool that performs connection, trigger-based and basic information collection from network services
SQL Injection Exploitation Tool
Blue Team detection lab created with Terraform and Ansible.
bsql-brute-forcer is a Perl script allows extraction of data from Blind SQL Injections
Notes for reviewing the posture of system builds
A friendly car security exploration tool for the CAN bus
Cisco Learning Blog - Chatops: Securing your Webex Bot
Platform Security Assessment Framework
Public Github Pages for Cisco
A preconfigured Windows-based system designed for rapid forensic investigations in both Azure and AWS.
CloudMapper helps you analyze your Amazon Web Services (AWS) environments.
crash is a tool to catch crashes from OS X applications and print debugging information such as registers, disassembled code and a memory dump of the stack
cspCalculator is a PoC implementation of a dynamic Content Security Policy creator
CTFs as you need them
CTFd-Discovery is a plugin to give CTFd the ability to enable challenge discovery
CTFd-Docker is a plugin to give CTFd the ability to manage Docker containers
Cisco Threat Intelligence API
Cisco Threat Intellligence Model