MSBuildAPICaller
MSBuildAPICaller is a part of the Sharp-Suite, a collection of tools used for offensive operations, allowing users to interact with the MSBuild API, enabling various malicious activities. The tool provides a way to execute arbitrary MSBuild scripts, which can be used to bypass security controls and evade detection. This can be particularly useful in red teaming and penetration testing scenarios. MSBuildAPICaller is a powerful tool in the hands of a skilled operator, allowing for creative and targeted attacks.
FEATURES
ALTERNATIVES
A tool to dump login passwords from Linux desktop users, leveraging cleartext credentials in memory.
A reminder that technology alone is not enough to stay secure against social engineering tactics.
DueDLLigence is an open-source tool for identifying and analyzing DLL hijacking vulnerabilities in Windows applications, providing automated analysis and remediation guidance.
CrackMapExec (CME) - A tool for querying internal database for host and credential information in cybersecurity.
Modular framework for web services penetration testing with support for various attacks.
A collection of Python scripts for password spraying attacks against Lync/S4B & OWA, featuring Atomizer, Vaporizer, Aerosol, and Spindrift tools.
A document that helps inform red team planning by contrasting against the very specific red team style described in Red Teams.
PINNED
InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Mandos Brief Newsletter
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.
CTIChef.com Detection Feeds
A tiered cyber threat intelligence service providing detection rules from public repositories with varying levels of analysis, processing, and guidance for security teams.
ImmuniWeb® Discovery
ImmuniWeb Discovery is an attack surface management platform that continuously monitors an organization's external digital assets for security vulnerabilities, misconfigurations, and threats across domains, applications, cloud resources, and the dark web.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.