NetSPI / PowerUpSQL

PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server
Other
2.47k stars 462 forks source link

Should add warning messages at Readme.md #12

Closed sujunmin closed 7 years ago

sujunmin commented 7 years ago

Last week I used this tool to test my sql servers, and then I got the mail from antivirus system administrators that I used "HackTool" at that time, It would violate the policies for my organization.

I used VirusTotal to scan this project files, some antivirus software said there is HackTool or Trojan.

So I think it should be added some warning messages at Readme.md for users who had antivirus softwares and need to keep the organization security policies.

nullbind commented 7 years ago

Thank you for the heads up. I'm sorry to hear that. I didn't know PowerUpSQL was getting flagged by AV. Technically it's an auditing tool, not a "HackTool" or "Trojan". However, I guess any software can be a HackTool if you choose to use it maliciously. I'll think about integrating some obfuscation in the next release.

Thanks again!