Try toboggan once and you will never want anything else for RCE during security assessments! It automatically adapts to diverse Linux environments through intelligent binary detection (BusyBox, custom paths) and provides built-in actions for file transfers and post-exploitation tasks.
- msauth-browser: A Python 3 tool that uses the Playwright browser automation library to extract Microsoft OAuth tokens. Ideal when you need to authenticate as a user and retrieve their login tokens in order to send emails, for example.
- msgraphx:
Abusing the Microsoft Graph SDK to search and harvest SharePoint files, Outlook mail, Teams messages and lot of M365 things.
These two tools are designed to simplify complex T-SQL interactions for Microsoft SQL Server environments. You can impersonate any user along the way to the last linked server in your chain. Both tools prioritize modularity, extensibility, and operator experience, following robust OOP practices and addressing real-world red team requirements. Each tool serves a distinct purpose.
- MSSQLand: A lightweight C# executable, designed for beacon assembly execution and restricted environments.
- mssqlclient-ng: The Python3 twin built upon
impacket'smssqlclient.py, ideal for external access.
Salesforce Experience Cloud
sfmap could be useful to assess the security of Salesforce portals.
If you have ever worked with SAP during a penetration test, you know how cumbersome using SXPG_CALL_SYSTEM on a SAP server can be, sapsxpg is for you.
