TycoRyco

MSOLSpray

A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if the account is locked, or if the account is disabled.

Invoke-PSImage

Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute

ROADtools

A collection of Azure AD/Entra tools for offensive and defensive security purposes

aws-allowlister

Automatically compile an AWS Service Control Policy that ONLY allows AWS services that are compliant with your preferred compliance frameworks.

awesome-azure-security

A curated list of awesome Microsoft Azure Security tools, guides, blogs, and other resources.

iamlive

Generate an IAM policy from AWS, Azure, or Google Cloud (GCP) calls using client-side monitoring (CSM) or embedded proxy

ImHex

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

bmc-tools

RDP Bitmap Cache parser

flare-vm

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

aws-incident-response-playbooks

azucar

Security auditing tool for Azure environments

ScoutSuite

Multi-Cloud Security Auditing Tool

AutomatedLab

AutomatedLab is a provisioning solution and framework that lets you deploy complex labs on HyperV and Azure with simple PowerShell scripts. It supports all Windows operating systems from 2008 R2 to 2022, some Linux distributions and various products like AD, Exchange, PKI, IIS, etc.

azure-powershell

Microsoft Azure PowerShell

flare-floss

FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.

SharPersist

Office365

Office 365 Powershell scripts

PowerShell

PowerShell functions and scripts (Azure, Active Directory, SCCM, SCSM, Exchange, O365, ...)

PSHunt

Powershell Threat Hunting Module

ADRecon

ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.

PowerMeta

PowerMeta searches for publicly available files hosted on various websites for a particular domain by using specially crafted Google, and Bing searches. It then allows for the download of those files from the target domain. After retrieving the files, the metadata associated with them can be analyzed by PowerMeta. Some interesting things commonly found in metadata are usernames, domains, software titles, and computer names.

az-301-prep-kit

Exercises and notes preparing for az-301 exam

az-300-prep-kit

Exercises and notes preparing for az-300 exam

Win32-OpenSSH

Win32 port of OpenSSH

PowerShell

PowerShell for every system!

awesome-security

A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.

my-arsenal-of-aws-security-tools

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

awesome-forensics

A curated list of awesome forensic analysis tools and resources

awesome-incident-response

A curated list of tools for incident response

Registry

Full featured, offline Registry parser in C#