juushya's starred repositories
BloodHound-Tools
Collection of tools that reflect the network dimension into Bloodhound's data
MSOLSpray
A Python implementation of dafthack's MSOLSpray. A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if the account is locked, or if the account is disabled.
CARTP-cheatsheet
Azure AD cheatsheet for the CARTP course
AzureADAppCredWatcher
Automation Runbook to retrieve all Azure AD application credentials (secrets and certificates) and send a mail report via Office 365 mail account about expiration status.
AzureADToolkit
PowerShell module to manage Azure Active Directory app credentials.
AzureADAssessment
Tooling for assessing an Azure AD tenant state and configuration
DeepFaceLive
Real-time face swap for PC streaming or video calls
fud_mimikatz_talk
This talk is about getting mimikatz to be undetectable by obfuscating it via powershell
awesome-bloodhound
A curated list of awesome BloodhoundAD resources
PSSW100AVB
A list of useful Powershell scripts with 100% AV bypass (At the time of publication).
DarkLoadLibrary
LoadLibrary for offensive operations
phishmonger
Phishing Framework for Pentesters
darkarmour
Windows AV Evasion
awesome-api-security
A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.
AzureAD_Autologon_Brute
Brute force attack tool for Azure AD Autologon/Seamless SSO - Source: https://arstechnica.com/information-technology/2021/09/new-azure-active-directory-password-brute-forcing-flaw-has-no-fix/
OffensiveRust
Rust Weaponization for Red Team Engagements.
EXOCET-AV-Evasion
EXOCET - AV-evading, undetectable, payload delivery tool
o365creeper-ng
Python script that performs email address validation against Office 365 without submitting login attempts.
CredMaster
Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling