PowerShell scripts for alternative SharpHound enumeration, including users, groups, computers, and certificates, using the ActiveDirectory module (ADWS) or System.DirectoryServices class (LDAP).

Low-Level Programming Roadmap and Resources

A comprehensive collection of cheatsheets for reverse engineering, binary analysis, and assembly programming tools. This repository serves as a one-stop reference for security researchers, reverse …

Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding "Shadow Credentials" to the target account.

A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.

Trying to tame the three-headed dog.

PowerShell framework to assess Azure security

PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server

PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.

Repository for the Microsoft Identity Tools PowerShell module which provides various tools for performing enhanced Identity administration activities.

A tool for checking if MFA is enabled on multiple Microsoft Services

A Post-exploitation Toolset for Interacting with the Microsoft Graph API

User enumeration and password bruteforce on Azure, ADFS, OWA, O365, Teams and gather emails on Linkedin

Active Directory certificate abuse.

BloodHound Attack Research Kit

A tool to help query AD via the LDAP protocol

Bjorn is a powerful network scanning and offensive security tool for the Raspberry Pi with a 2.13-inch e-Paper HAT. It discovers network targets, identifies open ports, exposed services, and potent…

Crtsh Subdomain Enumeration | This bash script makes it easy to quickly save and parse the output from https://crt.sh website.

A collection of scripts for assessing Microsoft Azure security

a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )

Unofficial revival of the well known .NET debugger and assembly editor, dnSpy

Find, verify, and analyze leaked credentials

Protect and discover secrets using Gitleaks 🔑

Custom Queries - Brought Up to BH4.1 syntax

Extract and execute a PE embedded within a PNG file using an LNK file.

AADInternals PowerShell module for administering Azure AD and Office 365

Collection of Cyber Threat Intelligence sources from the deep and dark web

C# Data Collector for BloodHound

Automatically run and populate a new instance of BH CE