Alternatives and similar repositories for SANS-HackFest-2023

Users that are interested in SANS-HackFest-2023 are comparing it to the libraries listed below

• zh54321 / EntraTokenAid
  A pure PowerShell solution for Entra OAuth authentication, enabling easy retrieval of access and refresh tokens
  ☆98Updated last month
• BloodHoundAD / TierZeroTable
  Table of AD and Azure assets and whether they belong to Tier Zero
  ☆27Updated last year
• sap8899 / Group3rExplorer
  Fun GUI for Group3rs output log
  ☆37Updated last year
• rootsecdev / Presentations
  Presentations from Conferences
  ☆29Updated 8 months ago
• Phil0x4a / msuserstats
  msuserstats is a comprehensive Powershell tool to manage accounts from Microsoft Entra ID and Active Directory. It supports: a unified vi…
  ☆40Updated 2 months ago
• techspence / BadShares
  A tool to create randomly insecure file shares that also contain unsecured credential files
  ☆41Updated last year
• zh54321 / GraphPreConsentExplorer
  A comprehensive list of usable Entra ID first-party clients with pre-consented Microsoft Graph scopes, in a simple YAML-file explorable w…
  ☆107Updated 2 months ago
• techBrandon / CAPs
  Scripts to enumerate and report on Entra Conditional Access
  ☆32Updated last month
• emiliensocchi / azurehound-queries
  🌩️ Collection of BloodHound queries for Azure
  ☆70Updated 4 months ago
• absolomb / FindMeAccess
  ☆90Updated last month
• xg5-simon / MS-Graph-BlueTeam
  MS Graph Commands and Tools for Blue Teamers
  ☆49Updated last year
• Ocel0tSec / AzureDump
  Powershell Script to enumerate AzureAD and output good data
  ☆14Updated last year
• improsec / 2Cloudz
  ☆25Updated 3 years ago
• sap8899 / reportly
  Reportly is an AzureAD user activity report tool.
  ☆95Updated last year
• NetSPI / FuncoPop
  Tools for attacking Azure Function Apps
  ☆81Updated 7 months ago
• zh54321 / PoCEntraDeviceComplianceBypass
  Simple pure PowerShell POC to bypass Entra / Intune Compliance Conditional Access Policy
  ☆142Updated 3 months ago
• secureworks / primary-refresh-token-viewer
  ☆11Updated 2 years ago
• h4wkst3r / ADOKit
  Azure DevOps Services Attack Toolkit
  ☆141Updated 2 months ago
• bouj33boy / Domain-Persistence-Detection-Triage-and-Recovery-SO-CON-2024
  Resources Links for the Research Based on Josh Prager and Nico Shyne's
  ☆13Updated 7 months ago
• Hagrid29 / AbuseAzureAPIPermissions
  Abuse Azure API permissions for red teaming
  ☆67Updated 2 years ago
• LearningKijo / ResearchDev
  ResearchDev - XDR & SIEM Detection
  ☆64Updated last month
• HackmichNet / AzTokenFinder
  ☆106Updated 2 years ago
• notEricaZelic / M365AdminAccessReviewer
  Shows which M365 Objects have Privileged Access and what type (i.e. PIM, Direct, Currently Elevated)
  ☆25Updated 2 weeks ago
• gladstomych / AHHHZURE
  AHHHZURE is an automated deployment script that creates a vulnerable Azure cloud lab for offensive security practitioners and enthusiasts…
  ☆104Updated last year
• ASOT-LABS / TeamsBreaker
  ☆46Updated last year
• techBrandon / DC32-GOAD
  ☆53Updated 9 months ago
• olafhartong / DefenderHarvester
  Expose a lot of MDE telemetry that is not easily accessible in any searchable form
  ☆106Updated 5 months ago
• kiwids0220 / deviceCode2WinHello
  A small script that automates Entra ID persistence with Windows Hello For Business key
  ☆57Updated 3 months ago
• csandker / Azure-AccessPermissions
  ☆108Updated 2 years ago
• bagelByt3s / ludus_adfs
  An Ansible collection that installs an ADFS deployment with optional configurations.
  ☆39Updated 5 months ago