GoWitness is a website screenshot utility written in Golang, that uses Chrome Headless to generate screenshots of web interfaces using the command line, with a handy report viewer to process results. GoWitness
Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user. noPac
Aquatone is a tool for visual inspection of websites across a large amount of hosts and is convenient for quickly gaining an overview of HTTP-based attack surface. Aquatone
Living Off The Land Binaries, Scripts and Libraries LOLBAS
Monkey365 provides a tool for security consultants to easily conduct not only Microsoft 365, but also Azure subscriptions and Microsoft Entra ID security configuration reviews. Monkey 365
TREVORspray is a modular password sprayer with threading, SSH proxying, loot modules, and more! TrevorSpray
OneDrive user enumeration - pentest tool to enumerate valid o365 users OneDrive Enum