PowerSploit - A PowerShell Post-Exploitation Framework

Six Degrees of Domain Admin

Repository for my flipper zero badUSB payloads. Now almost entirely plug and play.

Red Teaming Tactics and Techniques

The Official Bash Bunny Payload Repository

HardeningKitty and Windows Hardening Settings

This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can be mitigated or detected.

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAR…

Azure Security Resources and Notes

A tool for checking if MFA is enabled on multiple Microsoft Services

AADInternals PowerShell module for administering Azure AD and Office 365

Some usefull Scripts and Executables for Pentest & Forensics

A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, i…

PowerHuntShares is an audit script designed in inventory, analyze, and report excessive privileges configured on Active Directory domains.

retrieve information via O365 and AzureAD with a valid cred

Azure JWT Token Manipulation Toolset

This repo contains my own Ducky/BadUSB scripts, related PowerShell scripts and other Flipper Zero related stuff.

powershell script and a rubber ducky payload to grab wifi password from computer.

PowerShell-powered Chrome password extractor for Windows 10

A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, i…