Alternatives and similar repositories for SANS-HackFest-2023:

Users that are interested in SANS-HackFest-2023 are comparing it to the libraries listed below

• BloodHoundAD / TierZeroTable
  Table of AD and Azure assets and whether they belong to Tier Zero
  ☆26Updated last year
• rootsecdev / Presentations
  Presentations from Conferences
  ☆27Updated 6 months ago
• Ocel0tSec / AzureDump
  Powershell Script to enumerate AzureAD and output good data
  ☆14Updated last year
• zh54321 / EntraTokenAid
  A pure PowerShell solution for Entra OAuth authentication, enabling easy retrieval of access and refresh tokens
  ☆88Updated last month
• techBrandon / CAPs
  Scripts to enumerate and report on Entra Conditional Access
  ☆27Updated 6 months ago
• NetSPI / FuncoPop
  Tools for attacking Azure Function Apps
  ☆68Updated 4 months ago
• sap8899 / Group3rExplorer
  Fun GUI for Group3rs output log
  ☆37Updated last year
• DebugPrivilege / Research
  Repository that contains random short projects like write-ups, PowerShell scripts, and more.
  ☆28Updated 3 months ago
• HackmichNet / AzTokenFinder
  ☆105Updated 2 years ago
• gladstomych / AHHHZURE
  AHHHZURE is an automated deployment script that creates a vulnerable Azure cloud lab for offensive security practitioners and enthusiasts…
  ☆102Updated 10 months ago
• sap8899 / reportly
  Reportly is an AzureAD user activity report tool.
  ☆92Updated last year
• improsec / 2Cloudz
  ☆22Updated 2 years ago
• secureworks / primary-refresh-token-viewer
  ☆11Updated 2 years ago
• techspence / BadShares
  A tool to create randomly insecure file shares that also contain unsecured credential files
  ☆31Updated 10 months ago
• xg5-simon / MS-Graph-BlueTeam
  MS Graph Commands and Tools for Blue Teamers
  ☆49Updated last year
• olafhartong / DefenderHarvester
  Expose a lot of MDE telemetry that is not easily accessible in any searchable form
  ☆105Updated 3 months ago
• bouj33boy / Domain-Persistence-Detection-Triage-and-Recovery-SO-CON-2024
  Resources Links for the Research Based on Josh Prager and Nico Shyne's
  ☆13Updated 4 months ago
• secureworks / TokenMan
  ☆100Updated 2 years ago
• SySS-Research / azurenum
  Enumerate Microsoft Entra ID (Azure AD) fast
  ☆92Updated 2 months ago
• ASOT-LABS / TeamsBreaker
  ☆46Updated last year
• zh54321 / PoCEntraDeviceComplianceBypass
  Simple pure PowerShell POC to bypass Entra / Intune Compliance Conditional Access Policy
  ☆136Updated 3 weeks ago
• absolomb / FindMeAccess
  ☆83Updated this week
• emiliensocchi / azurehound-queries
  🌩️ Collection of BloodHound queries for Azure
  ☆60Updated 2 months ago
• nyxgeek / track_the_planet
  DEFCON 31 slide deck and video link
  ☆58Updated 8 months ago
• nicolonsky / AzureAiTMFunction
  Azure AiTM Function PoC to phish Entra ID Credentials
  ☆22Updated 5 months ago
• secureworks / BAADTokenBroker
  ☆76Updated 11 months ago
• MHaggis / ASRGEN
  ASR Configurator, Essentials and Atomic Testing
  ☆37Updated 4 months ago
• JeffMichelmore / MDEKit
  ☆41Updated last year