NetSPI

PowerUpSQL

PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server

MicroBurst

A collection of scripts for assessing Microsoft Azure security

SQLInjectionWiki

A wiki focusing on aggregating and documenting various SQL injection methods

PESecurity

PowerShell module to check if a Windows binary (EXE/DLL) has been compiled with ASLR, DEP, SafeSEH, StrongNaming, and Authenticode.

PowerHuntShares

PowerHuntShares is an audit script designed in inventory, analyze, and report excessive privileges configured on Active Directory domains.

NetblockTool

Find netblocks owned by a company

PowerShell

NetSPI PowerShell Scripts

ESC

Evil SQL Client (ESC) is an interactive .NET SQL console client with enhanced SQL Server discovery, access, and data exfiltration features. While ESC can be a handy SQL Client for daily tasks, it was originally designed for targeting SQL Servers during penetration tests and red team engagements. The intent of the project is to provide an .exe, but also sample files for execution through mediums like msbuild and PowerShell.

JavaSerialKiller

Burp extension to perform Java Deserialization Attacks

gcpwn

Enumeration/exploit/analysis/download/etc pentesting framework for GCP; modeled like Pacu for AWS; a product of numerous hours via @WebbinRoot

BetaFast

Vulnerable thick client applications used as examples in the Introduction to Hacking Desktop Applications blog series

AWSSigner

Burp Extension for AWS Signing

AutoDirbuster

Automatically run and save ffuf scans for multiple IPs

FuncoPop

Tools for attacking Azure Function Apps

PowerHunt

PowerHunt is a modular threat hunting framework written in PowerShell that leverages PowerShell Remoting for data collection on scale.

MonkeyWorks

cmdsql

silkwasm

HTML Smuggling with Web Assembly

ruler

A tool to abuse Exchange services

DetectionRules

This is a single location to store detection rules of various types.

Scheduled-Task

Native Binary for Creating a Scheduled Task

BAS-Rubeus

Trying to tame the three-headed dog.

DInvoke

Dynamically invoke arbitrary unmanaged code from managed code without PInvoke.

vbamc

Visual Basic for Applications macro project compiler.

WikiJekyllTheme

Wiki theme for various NetSPI wikis

XPath-Injection-Lab

bambdas

Bambdas collection for Burp Suite Professional and Community.

BypassFuzzer

Fuzz 401/403/404 pages for bypasses

GOAD

game of active directory

shopizer-admin