NetSPI

PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server

A collection of scripts for assessing Microsoft Azure security

PowerHuntShares is an audit script designed in inventory, analyze, and report excessive privileges configured on Active Directory domains.

A wiki focusing on aggregating and documenting various SQL injection methods

PowerShell module to check if a Windows binary (EXE/DLL) has been compiled with ASLR, DEP, SafeSEH, StrongNaming, and Authenticode.

goddi (go dump domain info) dumps Active Directory domain information

This is a burp intruder extender that is designed for automation and validation of XSS vulnerabilities.

Find netblocks owned by a company

NetSPI PowerShell Scripts

Pentesting framework for GCP & Google Workspace that enumerates/downloads data that feeds into a BloodHound Opengraph model. Includes credential management, workspace management, exploit scripts,...

Evil SQL Client (ESC) is an interactive .NET SQL console client with enhanced SQL Server discovery, access, and data exfiltration features. While ESC can be a handy SQL Client for daily tasks, it...

WSDL Parser extension for Burp

A utility to convert your AWS CLI credentials into AWS console access.

An example reference design for a proposed BOF PE

Attack path mapping for Active Directory, ADCS, SCCM, and MSSQL using BloodHound CE + OpenGraph data.

PowerShell script and Java code to decrypt WebLogic passwords

Grab ssh keys from ssh-agent

Burp extension to perform Java Deserialization Attacks

Vulnerable Django Application

DAFT: Database Audit Framework & Toolkit

Security Training Tool that demonstrates common mobile application vulnerabilities using Swift in iOS

Central Repo for Burp extensions

A collection of BOF-PE's that allow running tailscale from memory

Vulnerable thick client applications used as examples in the Introduction to Hacking Desktop Applications blog series

A DNS tunnel utilizing the Burp Collaborator

A Burp extension for generic extraction and reuse of data within HTTP requests and responses.

Burp Extension for AWS Signing

Tools for attacking Azure Function Apps

Automatically run and save ffuf scans for multiple IPs

HTML Smuggling with Web Assembly

SQLC2 is a PowerShell script for deploying and managing a command and control system that uses SQL Server as both the control server and the agent.

PowerHunt is a modular threat hunting framework written in PowerShell that leverages PowerShell Remoting for data collection on scale.

Dump IOS application heap space from memory

A tool to catch spoofed NBNS responses.

Salesforce identity and permission graph collector for BloodHound CE. Maps users, profiles, permission sets, roles, groups, sharing rules, connected apps, and field-level security into attack-path...