Alternatives and similar repositories for SANS-HackFest-2023

Users that are interested in SANS-HackFest-2023 are comparing it to the libraries listed below

• BloodHoundAD / TierZeroTable
  Table of AD and Azure assets and whether they belong to Tier Zero
  ☆26Updated 2 years ago
• PyroTek3 / ADLab
  Location of some Active Directory lab scripts I have created and find useful
  ☆82Updated 2 weeks ago
• zh54321 / GraphPreConsentExplorer
  A comprehensive list of usable Entra ID first-party clients with pre-consented Microsoft Graph scopes, in a simple YAML-file explorable w…
  ☆142Updated 7 months ago
• techBrandon / CAPs
  Scripts to enumerate and report on Entra Conditional Access
  ☆39Updated 2 months ago
• csandker / Azure-AccessPermissions
  ☆110Updated 2 years ago
• techspence / AppLockerInspector
  Audits an AppLocker policy XML and reports weak/misconfigured/risky settings, including actual ACL checks.
  ☆117Updated 2 months ago
• zh54321 / EntraTokenAid
  A pure PowerShell solution for Entra OAuth authentication, enabling easy retrieval of access and refresh tokens
  ☆119Updated 3 months ago
• emiliensocchi / azurehound-queries
  🌩️ Collection of BloodHound queries for Azure
  ☆78Updated 10 months ago
• HackmichNet / AzTokenFinder
  ☆107Updated 2 years ago
• sap8899 / Group3rExplorer
  Fun GUI for Group3rs output log
  ☆37Updated 2 years ago
• NotSoSecure / NoPrompt
  ☆92Updated 3 months ago
• gladstomych / AHHHZURE
  AHHHZURE is an automated deployment script that creates a vulnerable Azure cloud lab for offensive security practitioners and enthusiasts…
  ☆106Updated last year
• sap8899 / reportly
  Reportly is an AzureAD user activity report tool.
  ☆94Updated 2 years ago
• rootsecdev / Presentations
  Presentations from Conferences
  ☆30Updated last year
• Phil0x4a / msuserstats
  msuserstats is a comprehensive Powershell tool to manage accounts from Microsoft Entra ID and Active Directory. It supports: a unified vi…
  ☆42Updated 8 months ago
• techBrandon / DC32-GOAD
  ☆53Updated last year
• improsec / 2Cloudz
  ☆25Updated 3 years ago
• NetSPI / FuncoPop
  Tools for attacking Azure Function Apps
  ☆86Updated 2 weeks ago
• Ocel0tSec / AzureDump
  Powershell Script to enumerate AzureAD and output good data
  ☆14Updated 2 years ago
• secureworks / primary-refresh-token-viewer
  ☆11Updated 3 years ago
• nicolonsky / AzureAiTMFunction
  Azure AiTM Function PoC to phish Entra ID Credentials
  ☆25Updated last year
• notEricaZelic / M365AdminAccessReviewer
  Shows which M365 Objects have Privileged Access and what type (i.e. PIM, Direct, Currently Elevated)
  ☆36Updated 5 months ago
• NetSPI / ATEAM
  ☆119Updated 2 months ago
• kidtronnix / restless-guest
  An offensive toolkit for restless guests #DEFCON33
  ☆54Updated 3 months ago
• f-bader / MSRC-PatchReview
  A PowerShell variant of the amazing patch_review.py by kevthehermit
  ☆66Updated 3 weeks ago
• techspence / BadShares
  A tool to create randomly insecure file shares that also contain unsecured credential files
  ☆47Updated last year
• h4wkst3r / ADOKit
  Azure DevOps Services Attack Toolkit
  ☆150Updated 8 months ago
• SySS-Research / azurenum
  Enumerate Microsoft Entra ID (Azure AD) fast
  ☆98Updated 6 months ago
• nyxgeek / track_the_planet
  DEFCON 31 slide deck and video link
  ☆65Updated 5 months ago
• LuccaSA / PingCastle-Notify
  Monitor your PingCastle scans to highlight the rule diff between two scans
  ☆153Updated last month