JeffJerseyCow / eviloauthLinks
OAuth 2.0 exploitation, attack and research tools.
☆11Updated last year
Alternatives and similar repositories for eviloauth
Users that are interested in eviloauth are comparing it to the libraries listed below
Sorting:
- DelePwn is a security assessment tool designed to identify and demonstrate the risks associated with Google Workspace Domain-Wide Delegat…☆33Updated 2 weeks ago
- Automation of Active Directory penetration testing tasks on top of BloodHound CE☆34Updated last year
- Silver SAML forgery tool☆52Updated last year
- This script gets all accepted domains in Microsoft 365 using autodiscover, gets the tenant name and checks if there is a Microsoft Defend…☆24Updated last year
- cvet is a Python utility for pulling actionable vulnerabilities from cvetrends.com☆39Updated 2 years ago
- tool for identifying guest relationships between companies☆92Updated 11 months ago
- ServiceLens is a Python tool for analyzing services linked to Microsoft 365 domains. It scans DNS records like SPF and DMARC to identify …☆77Updated 7 months ago
- dauthi is a tool that takes advantage of API functionality across a variety of MDM solutions to perform user enumeration and single-facto…☆41Updated last year
- ☆27Updated 2 years ago
- ☆21Updated last year
- A tool for quickly evaluating IAM permissions in AWS.☆57Updated last year
- Scripts that automate portions of pentests.☆50Updated last month
- Enumerate and check domains for Azure tenants☆58Updated 3 years ago
- https://lolad-project.github.io/☆76Updated 5 months ago
- Providing Azure pipelines to create an infrastructure and run Atomic tests.☆52Updated last year
- Citrix Scanner for CVE-2023-3519☆51Updated last year
- Tool to perform GCP Domain Wide Delegation abuse and access Gmail and Drive data☆46Updated last year
- IP address filter by City☆11Updated 4 months ago
- Automates the network enumeration process in a fire-and-forget manner, among many more functions. Aims to be the illest Nmap/masscan wrap…☆53Updated 2 months ago
- The following code when compiled in go takes a domain name as an argument and outputs an HTML file with Google Search links for various d…☆13Updated 8 months ago
- A small script that automates Entra ID persistence with Windows Hello For Business key☆57Updated 3 months ago
- fully async implementation of Dirkjan's ROADTools☆31Updated 2 months ago
- ☆21Updated last week
- ☆12Updated 7 months ago
- This python script performs a number of sqlite queries (mainly password metadata) against sqlite databases (Created by ROADtools) to prov…☆22Updated 11 months ago
- ☆69Updated last week
- Dump Kerberos tickets from the KCM database of SSSD☆50Updated 8 months ago
- ☆52Updated last year
- tool for enumeration & bulk download of sensitive files found in SharePoint environments☆66Updated 2 months ago
- CaptainCredz is a modular and discreet password-spraying tool.☆110Updated last month