5l1v3r1 Goto Github PK

msolspray

A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if the account is locked, or if the account is disabled.

msp

Multidimensional Space Processing Library

msp432-driverlib

TI's MSP432 DriverLib (http://www.ti.com/tool/mspdriverlib)

msp432-feather

Public repository for my MSP432P401R Feather board

mspaintide

Programming in MS Paint

mspg

Multiple strong passwords generator.

mspider

Spider

msploitego

Pentesting suite for Maltego based on data in a Metasploit database

msprobe

Finding all things on-prem Microsoft for password spraying and enumeration.

msquic

Cross-platform implementation of the IETF QUIC protocol.

msr605

interfaces the msr605 using python

msrc-security-research

Security Research from the Microsoft Security Response Center (MSRC)

msrpc-to-attack

A repository that maps commonly used attacks using MSRPC protocols to ATT&CK

msrprn-coerce

A python script to force authentification using MS-RPRN RemoteFindFirstPrinterChangeNotificationEx function (opnum 69).

mss

Movie/Series searcher in multiple platforms via keyword.

msspray

Password attacks and MFA validation against various endpoints in Azure and Office 365

mssql-analysis-coerce

A technique to coerce a Windows SQL Server to authenticate on an arbitrary machine.

mssql-attacker

Initial release of MSSQL database attack tool.

mssql-command-tool

mssql 终端连接工具|命令执行

mssql-courses

Istanbul Şehir University Lecture Notes Of MSSQL Database

mssql-fileless-rootkit-warsqlkit

Bildiğiniz üzere uzun zamandır MSSQL üzerine çalışmalar yapmaktayım. Bu yazımda uzun zamandır uğraştığım bir konuyu ele alacağım, MSSQL Rootkit. Bildiğiniz üzere şimdiye kadar MS-SQL için anlatılan post-exploitation işlemlerinin büyük çoğunluğu “xp_cmdshell” ve “sp_OACreate” stored procedure’lerini kullanarak anlatılır. Peki xp_cmdshell ve sp_OACreate stored procedure’lerinin olmadığı bir MSSQL sunucusunun “sa” hesabını ele geçirmişsek, o sisteme girmekten vaz mı geçeceğiz? Tabii ki vazgeçmememiz gerekiyor. Bu makale “sa” hesabının yakalandığı ve “xp_cmdshell”, “sp_OACreate”, “sp_OAMethod” vb. prosedürlerin hiç birinin çalışmadığı bir senaryo düşünülerek kaleme alınmıştır.

mssql-pentest-cheatsheet

mssql-secadmin-privesc

MS SQL Server - Security Admin Privilege Escalation

mssql_sql_bypass_wiki

MSSQL注入提权,bypass的一些总结

mssqldump

This Toolkit help you export all databases to csv file

mssqli-duet

SQL injection script for MSSQL that extracts domain users from an Active Directory environment based on RID bruteforcing

mssqlproxy

mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse.

mssqlscan

mssqludpscanner

Discover MSSQL Instances via UDP Scanning

mst

A meta-scan tool used to kick off a number of command-line security tools during VA/PT work.