Pinned Loading

1. p1ckled_web_shell p1ckled_web_shell Public

   A dynamic PHP web shell

   PHP 4

2. SecSwap SecSwap Public

   Python 2

3. GraphAttack GraphAttack Public

   A Microsoft Graph API Attack Framework, similar to GraphRunner, allowing interactive Authentication flow. For times when Device Tokens are unable to be obtained.

   PowerShell 1

4. AWS_Federated_Login AWS_Federated_Login Public

   A Bash script that generates a federated AWS Console login URL from existing keys.

   Shell

5. M365Recon M365Recon Public

   PowerShell-based reconnaissance tool for identifying Microsoft 365 tenant configuration, public endpoints, and exposure indicators through unauthenticated enumeration techniques.

   PowerShell 1

6. php_injector php_injector Public

   For when web shells do not work due to disabled PHP functions, this is the next best thing. PHP injection allows you to inject custom and templated PHP code to be executed server-side.

   PHP