netspi Goto Github PK

devise_security_extension

An enterprise security extension for devise, trying to meet industrial standard security demands for web applications.

dinvoke

Dynamically invoke arbitrary unmanaged code from managed code without PInvoke.

django.nv

Vulnerable Django Application

doctordocker

Docker Doctor - Automated upgrading of libraries through Docker deployments.

edge-cases-in-web

esc

Evil SQL Client (ESC) is an interactive .NET SQL console client with enhanced SQL Server discovery, access, and data exfiltration features. While ESC can be a handy SQL Client for daily tasks, it was originally designed for targeting SQL Servers during penetration tests and red team engagements. The intent of the project is to provide an .exe, but also sample files for execution through mediums like msbuild and PowerShell.

eyewitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

funcopop

Tools for attacking Azure Function Apps

goat.js

Tutorial for Node.js security

goddi

goddi (go dump domain info) dumps Active Directory domain information

gppdecrypt

Stand alone script to decrypt GPP cpassword.

grails-nv

Vulnerable Grails application

heapdump-ios

Dump IOS application heap space from memory

httpillage

httpscrapers

NetSPI HTTP Scrapers

ike

Minimalistic IKEv2 (RFC 5996) implementation in Python.

ios-11.1.2-15b202-jailbreak

iOS 11.1.2 (15B202) Jailbreak

javaserialkiller

Burp extension to perform Java Deserialization Attacks

javaunserializeexploits

jig

Jira Information Gatherer

jquery-sparkline-rails

Packages jquery.sparklines library as a Gem for Ruby on Rails

jsonbeautifier

JSON Beautifier for Burp written in Java

jstree-rails

A gem to automate using jsTree with Rails 3

jsws

JavaScript Web Service Proxy Burp Plugin

log4j-shell-poc

A Proof-Of-Concept for the recently found CVE-2021-44228 vulnerability.

masherysigner

Burp extension for Mashery request signing

metasploit-framework

Metasploit Framework

microburst

A collection of scripts for assessing Microsoft Azure security

moneyx

MoneyX is an intentionally vulnerable JSP application used for training developers in application security concepts.

monkeyworks