External attack surface assessment — recon, misconfiguration detection, no exploitation 🇱🇺
The NC3 Testing Platform is a security toolkit developed by NC3.lu — Luxembourg's National Cybersecurity Competence Center — operating under the Luxembourg House of Cybersecurity.
It automates external attack surface assessments from an unauthenticated, black-box perspective — covering passive reconnaissance, active service probing, and misconfiguration detection across DNS, PKI, mail security controls, and HTTP/S-exposed services. The platform operates strictly within a pre-exploitation scope: no vulnerability exploitation, no lateral movement, no payload delivery.
v4 is a ground-up rewrite, currently under active development. Its repositories are private for now, and will be published when the public version of the platform is released.
v3 is live at testing.nc3.lu · source at NC3-LU/TestingPlatform
NC3 collaborates closely with the national and international cybersecurity community:
Building a safer digital Luxembourg — one commit at a time.
📍 122 rue Adolphe Fischer, L-1521 Luxembourg | 📞 +352 274 00 98 601 | 🌐 nc3.lu