NetSPI

Repositories

• MicroBurst

  A collection of scripts for assessing Microsoft Azure security
  PowerShell 129 759 1 0 Updated Jul 27, 2021

• AutoDirbuster

  Automatically run and save Dirbuster scans for multiple IPs
  Python 5 35 0 0 Updated Jul 26, 2021

• MonkeyWorks
  C# BSD-3-Clause 23 45 0 1 Updated Jul 14, 2021

• PowerUpSQL

  PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server
  PowerShell 351 1,499 16 1 Updated Jul 2, 2021

• PycroBurst

  Python implementation of select MicroBurst scripts.
  Python 0 0 0 0 Updated Jul 1, 2021

• pyrsistent

  Forked from tobgu/pyrsistent

  Persistent/Immutable/Functional data structures for Python
  Python MIT 116 0 0 0 Updated May 19, 2021

• PESecurity

  PowerShell module to check if a Windows binary (EXE/DLL) has been compiled with ASLR, DEP, SafeSEH, StrongNaming, and Authenticode.
  PowerShell MIT 135 461 7 0 Updated May 14, 2021

• PowerShell

  NetSPI PowerShell Scripts
  PowerShell 84 187 0 2 Updated Apr 27, 2021

• BetaFast

  Vulnerable thick client applications used as examples in the Introduction to Hacking Desktop Applications blog series
  C# GPL-3.0 9 63 0 1 Updated Apr 21, 2021

• ESC

  Evil SQL Client (ESC) is an interactive .NET SQL console client with enhanced SQL Server discovery, access, and data exfiltration features. While ESC can be a handy SQL Client for daily tasks, it was originally designed for targeting SQL Servers during penetration tests and red team engagements. The intent of the project is to provide an .exe, b…
  C# 24 138 2 0 Updated Feb 27, 2021

• BurpExtractor

  A Burp extension for generic extraction and reuse of data within HTTP requests and responses.
  Java 20 67 5 3 Updated Feb 16, 2021

• NetblockTool

  Find netblocks owned by a company
  Python 24 115 2 0 Updated Feb 15, 2021

• DAFT

  DAFT: Database Audit Framework & Toolkit
  C# 32 119 0 1 Updated Nov 10, 2020

• JavaSerialKiller

  Burp extension to perform Java Deserialization Attacks
  Java MIT 57 192 1 4 Updated Oct 3, 2020

• SQLInjectionWiki

  A wiki focusing on aggregating and documenting various SQL injection methods

  mysql sql wiki injection oracle sqli mssql
  HTML 133 633 2 7 Updated Jul 27, 2020

• aws_consoler

  A utility to convert your AWS CLI credentials into AWS console access.
  Python BSD-3-Clause 4 74 3 0 Updated May 7, 2020

• AWSSigner

  Burp Extension for AWS Signing
  Java MIT 26 57 3 0 Updated Apr 23, 2020

• Burp-Extensions

  Central Repo for Burp extensions
  Java 54 128 4 0 Updated Apr 10, 2020

• sshkey-grab

  Grab ssh keys from ssh-agent
  Python 64 197 2 2 Updated Mar 22, 2020

• goddi

  goddi (go dump domain info) dumps Active Directory domain information
  Go 83 337 3 1 Updated Feb 27, 2020

• SQLC2

  SQLC2 is a PowerShell script for deploying and managing a command and control system that uses SQL Server as both the control server and the agent.
  PowerShell BSD-3-Clause 11 48 0 0 Updated Feb 7, 2020

• JSONBeautifier

  JSON Beautifier for Burp written in Java

  extension burp json-beautifier netspi
  Java 20 29 6 1 Updated Nov 20, 2019

• Custom-Passive-Scanner

  Define custom findings for Burp's Passive Scanner using regex.
  Java 5 6 0 0 Updated Oct 24, 2019

• BurpCollaboratorDNSTunnel

  A DNS tunnel utilizing the Burp Collaborator
  Java 28 85 0 0 Updated Oct 8, 2019

• HTTPScrapers

  NetSPI HTTP Scrapers
  Python 14 19 0 0 Updated Jul 9, 2019

• Powershell-Modules
  PowerShell 93 120 5 2 Updated Jun 6, 2019

• MasherySigner

  Burp extension for Mashery request signing
  Java MIT 3 0 0 0 Updated Apr 30, 2019

• omniauth-ldap

  Forked from gaurav-notnetspi/omniauth-ldap

  LDAP strategy for OmniAuth
  Ruby 162 1 0 0 Updated Apr 4, 2019

• CollegePresentation
  1 2 0 0 Updated Oct 4, 2018

• Wsdler

  WSDL Parser extension for Burp
  Java 48 162 4 0 Updated Jun 25, 2018