Compass Security

Hacking_Tools_Cheat_Sheet

BloodHoundQueries

SAMLRaider

SAML2 Burp Extension

security_resources

Collection of online security resources

EntraFalcon

A lightweight PowerShell tool for assessing the security posture of Microsoft Entra ID environments. It helps identify privileged objects, risky assignments, and potential misconfigurations.

OnPremSecurityBestPractices

bloodhoundce-resources

jwt-scanner

JWT-scanner Burp Extension

mssqlrelay

Tool for MSSQL relay audit and abuse

burp-copy-request-response

Burp extension for quickly copying request/response data.

PowerLsassSilentProcessExit

TokenPhisher

impacket

Impacket is a collection of Python classes for working with network protocols.

Readinizer

Microsoft GPO Readiness Lateral Movement Detection Tool

pipeleak

Pipeleak scans CI/CD logs and artifacts to detect leaked secrets and pivot from them

conkeyscan

A Pentesters Confluence Keyword Scanner

bRPC-Web

bapp-downloader

Script for downloading Burp Suite extension files

deviceCode2SecurityKey

PoC to add a security key to Entra ID via device code phishing

TokenTormentor

CollaboRaider

An improved version of the CollaboratorEverywhere Burp extension

xvulnhuntr

Zero shot vulnerability discovery using LLMs

JimagePatcher

Recreate jimage files from extracted jimages.

PurpleOps

An open-source self-hosted purple team management web application.

anti-csrf-token-from-referer

Just-ANother-Enabler

Just ANother Enabler

ThreatFoxImporter

impacket-mssqlshell

Impacket is a collection of Python classes for working with network protocols.

pipeleak-action

SharpHound3

C# Data Collector for the BloodHound Project, Version 3