juushya

BloodHound-Tools

Collection of tools that reflect the network dimension into Bloodhound's data

DInvoke

Dynamically invoke arbitrary unmanaged code from managed code without P/Invoke.

Omnispray

Modular Enumeration and Password Spraying Framework

MSOLSpray

A Python implementation of dafthack's MSOLSpray. A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if the account is locked, or if the account is disabled.

CARTP-cheatsheet

Azure AD cheatsheet for the CARTP course

AzureADAppCredWatcher

Automation Runbook to retrieve all Azure AD application credentials (secrets and certificates) and send a mail report via Office 365 mail account about expiration status.

AzureADToolkit

PowerShell module to manage Azure Active Directory app credentials.

AzureADAssessment

Tooling for assessing an Azure AD tenant state and configuration

CRT

Contact: CRT@crowdstrike.com

NSGenCS

Extendable payload obfuscation and delivery framework

PEzor

Open-Source Shellcode & PE Packer

DeepFaceLive

Real-time face swap for PC streaming or video calls

provreq

Adversary Emulation Planner

fud_mimikatz_talk

This talk is about getting mimikatz to be undetectable by obfuscating it via powershell

awesome-bloodhound

A curated list of awesome BloodhoundAD resources

PSSW100AVB

A list of useful Powershell scripts with 100% AV bypass (At the time of publication).

DarkLoadLibrary

LoadLibrary for offensive operations

o365recon

retrieve information via O365 and AzureAD with a valid cred

flik

Automate ISSG Tool Setups

GibsonBird

phishmonger

Phishing Framework for Pentesters

darkarmour

Windows AV Evasion

awesome-api-security

A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.

Core

Core bypass Windows Defender and execute any binary converted to shellcode

AzureAD_Autologon_Brute

Brute force attack tool for Azure AD Autologon/Seamless SSO - Source: https://arstechnica.com/information-technology/2021/09/new-azure-active-directory-password-brute-forcing-flaw-has-no-fix/

aad-auth-n-z

OffensiveRust

Rust Weaponization for Red Team Engagements.

EXOCET-AV-Evasion

EXOCET - AV-evading, undetectable, payload delivery tool

o365creeper-ng

Python script that performs email address validation against Office 365 without submitting login attempts.

CredMaster

Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling