nyxgeek

onedrive_user_enum

onedrive user enumeration - pentest tool to enumerate valid o365 users

ntlmscan

scan for NTLM directories

lyncsmash

locate and attack Lync/Skype for Business

AzureAD_Autologon_Brute

Brute force attack tool for Azure AD Autologon/Seamless SSO - Source: https://arstechnica.com/information-technology/2021/09/new-azure-active-directory-password-brute-forcing-flaw-has-no-fix/

nyxgeek-rules

Custom password cracking rules for Hashcat and John the Ripper

track_the_planet

DEFCON 31 slide deck and video link

dirdevil

hiding in plain sight: part 2

autodiscover_enum

time-based user enum via Basic Auth in Azure against Autodiscover

cloudkicker

self-hosted Azure OSINT tool

azure_survey_2025

results of scraping OneDrive from February 2022 - March 2025

frontdoor_waf_wtf

Script to check Azure Front Door WAF for insecure RemoteAddr variable

trontastic_usernames

top usernames from azure survey 2025

bad_guest

enum4linux

enum4Linux is a Linux alternative to enum.exe for enumerating data from Windows and Samba hosts.

simple_scanners

simple pentest scanning scripts with no db

TeamsEnum

User Enumeration of Microsoft Teams users via API

graphninja

icu

ICU for Microsoft Teams - to be released February 14, 2025

exploits

my public exploit code

shmoocon

Azure Survey 2025: 60 Million Users and Counting. my slide deck from shmoocon #20

LDAPPER

LDAP Querying without the Suck

media

images, gifs, movies i've modded or made

open_source_hardware

a list of open source hardware projects that interest me

AADInternals

AADInternals PowerShell module for administering Azure AD and Office 365

blogs

links to my blogs

gcp_tools

scripts for testing GCP

GraphRunner

A Post-exploitation Toolset for Interacting with the Microsoft Graph API

httpx

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

open_source_farming

stargazer

scoreboard to compare github stars among users