Tools
ssh_decoder.rb
Josh Wright has an article on decrypting SSH sessions based on the 2008 Debian OpenSSH vulnerability, with helpful hints on how to do it, and some patches to publicly available tools to make them work even better. http://www.willhackforsushi.com/code/ssh_decoder.rb
WeaponizedFlash.as
Kevin Johnson and Mike Poor released this weaponized flash action script, as part of their “Friendly Traitor: Our software wants to kill us” presentation series. GitHub https://github.com/inguardians/WeaponizedFlash