Skip to content
@NetSPI

NetSPI

Pinned Loading

  1. PowerUpSQL PowerUpSQL Public

    PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server

    PowerShell 2.7k 471

  2. SQLInjectionWiki SQLInjectionWiki Public

    A wiki focusing on aggregating and documenting various SQL injection methods

    HTML 800 148

  3. PESecurity PESecurity Public

    PowerShell module to check if a Windows binary (EXE/DLL) has been compiled with ASLR, DEP, SafeSEH, StrongNaming, and Authenticode.

    PowerShell 669 147

Repositories

Showing 10 of 152 repositories
  • OCISigner Public

    A Burp Suite extension to sign OCI HTTP requests using all supported OCI authentication mechanisms including API keys, session tokens, instance principals, & resource principals

    NetSPI/OCISigner's past year of commit activity
    Java 6 BSD-3-Clause 0 0 2 Updated Sep 4, 2026
  • gcpwn Public

    Pentesting framework for GCP & Google Workspace that enumerates/downloads data that feeds into a BloodHound Opengraph model. Includes credential management, workspace management, exploit scripts, etc.

    NetSPI/gcpwn's past year of commit activity
    Python 310 BSD-3-Clause 29 0 3 Updated Sep 4, 2026
  • OCInferno Public

    A pentesting tool for enumeration/download/graphical analysis of OCI content. Includes an OpenGraph generator for Bloodhound-style analysis.

    NetSPI/OCInferno's past year of commit activity
    Python 22 BSD-3-Clause 2 1 2 Updated Sep 3, 2026
  • BypassFuzzer-Burp Public Forked from intrudir/BypassFuzzer-Burp

    The Java Burp Extension version of @intrudir's BypassFuzzer tool

    NetSPI/BypassFuzzer-Burp's past year of commit activity
    Java 2 MIT 5 0 0 Updated Aug 28, 2026
  • BOFscale Public

    A collection of BOF-PE's that allow running tailscale from memory

    NetSPI/BOFscale's past year of commit activity
    Go 134 BSD-3-Clause 19 1 1 Updated Aug 27, 2026
  • oci-lexer-parser Public

    A utility to convert OCI IAM Policy Statements and Dynamic Group Matching Rules to serialized JSON output.

    NetSPI/oci-lexer-parser's past year of commit activity
    Python 3 BSD-3-Clause 0 0 0 Updated Aug 12, 2026
  • AD-PathFinder Public

    Attack path mapping for Active Directory, ADCS, SCCM, and MSSQL using BloodHound CE + OpenGraph data.

    NetSPI/AD-PathFinder's past year of commit activity
    Python 236 BSD-3-Clause 23 1 0 Updated Aug 9, 2026
  • ForceHound Public

    Salesforce identity and permission graph collector for BloodHound CE. Maps users, profiles, permission sets, roles, groups, sharing rules, connected apps, and field-level security into attack-path graphs.

    NetSPI/ForceHound's past year of commit activity
    Python 48 BSD-3-Clause 4 0 1 Updated Jul 30, 2026
  • burpcollaborator-docker Public Forked from intrudir/burpcollaborator-docker

    A set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard certificate in as simple a process as possible

    NetSPI/burpcollaborator-docker's past year of commit activity
    Shell 0 50 0 0 Updated Jul 23, 2026
  • confused Public Forked from visma-prodsec/confused

    Tool to check for dependency confusion vulnerabilities in multiple package management systems

    NetSPI/confused's past year of commit activity
    Go 1 MIT 114 0 0 Updated Jul 8, 2026
View all repositories