Two WinForms GUI tools for enumerating, searching, and exfiltrating data from M365 environments using application-level OAuth tokens
☆210Mar 4, 2026Updated 2 months ago
Alternatives and similar repositories for M365Pwned
Users that are interested in M365Pwned are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A C# tool for requesting certificates from ADCS using DCOM over SMB. This tool allows you to remotely request X.509 certificates from CA …☆168Nov 2, 2025Updated 6 months ago
- Fun GUI for Group3rs output log☆37Aug 14, 2023Updated 2 years ago
- JWTLens - Burp Suite extension for automated JWT security testing. 62 checks: passive scanning, algorithm confusion, signature bypass, …☆47Mar 19, 2026Updated last month
- Pure PowerShell port of PassTheCert tool to authenticate to an LDAP/S server with a certificate through Schannel☆63Apr 13, 2025Updated last year
- Evasion kit for Cobalt Strike☆30Jan 16, 2026Updated 3 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Lnk crafting and research tools☆164Mar 4, 2026Updated 2 months ago
- Adaptix C2 agent using Crystal Palace PIC linker and PICO module system☆80Mar 7, 2026Updated last month
- Living off the land searches for explorer and sharepoint☆97Dec 7, 2025Updated 4 months ago
- The Azure Execution Tool☆155Feb 6, 2026Updated 3 months ago
- Interactive PowerShell framework for testing WMI, COM, LOLBAS, and persistence techniques☆113Dec 28, 2025Updated 4 months ago
- A simple tool to identify WDS servers in Active Directory☆32Aug 25, 2025Updated 8 months ago
- Proof-of-concept implementation of AI-enabled postex DLLs☆90Sep 10, 2025Updated 7 months ago
- Opengraph-Compatible JSON Generator for BloodHound☆28Mar 30, 2026Updated last month
- Modern security products (CrowdStrike, Bitdefender, SentinelOne, etc.) hook the nLoadImage function inside clr.dll to intercept and scan …☆213Dec 8, 2025Updated 4 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Brute Ratel External C2 (Microsoft Teams)☆38Dec 11, 2024Updated last year
- e(X)tensiable (Rust) Malware Toolkit: (Soon!) Full Featured Rust C2 Framework with Awesome Features!☆28Aug 19, 2024Updated last year
- Slides and resources from MCTTP 2025 Talk☆70Oct 26, 2025Updated 6 months ago
- KslDump — Why bring your own knife when Defender already left one in the kitchen?☆312Apr 13, 2026Updated 3 weeks ago
- ☆78Apr 8, 2026Updated 3 weeks ago
- Pipeleek scans CI/CD logs and artifacts to detect leaked secrets and pivot from them☆19Updated this week
- A PowerShell variant of the amazing patch_review.py by kevthehermit☆219Mar 4, 2026Updated 2 months ago
- custom impacket mssqlclient☆26Sep 16, 2023Updated 2 years ago
- Power Automate C2 (PAC2) : Stealth living-off-the-cloud C2 framework.☆37Apr 16, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Crystal Palace RDLL loader for Adaptix C2 with Ekko sleep obfuscation, IAT hooking via PICO, and per-section permission restoration☆120Mar 24, 2026Updated last month
- Enumerate Domain Users Without Authentication☆285Apr 22, 2025Updated last year
- Windows protocol library, including SMB and RPC implementations, among others.☆775Apr 14, 2026Updated 3 weeks ago
- Cobalt Strike UDRL for memory scanner evasion.☆52Dec 4, 2023Updated 2 years ago
- Phantom is project created to perform loading and executing unmanaged code in memory within an IIS environment running in full‑trust mode…☆103Apr 27, 2026Updated last week
- PowerShell Script to automatically abuse the BadSuccessor vulnerability (CVE-2025-53779)☆45Nov 19, 2025Updated 5 months ago
- Simple pure PowerShell POC to bypass Entra / Intune Compliance Conditional Access Policy☆170Nov 17, 2025Updated 5 months ago
- LoadLibrary for offensive operations☆33Dec 14, 2021Updated 4 years ago
- Gopacket is a clean Go implementation of Impacket, a library intended for working with network protocols.☆607Apr 24, 2026Updated last week
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- GetSystem-LCI is a PowerShell script to escalate privileges from Administrator to NT AUTHORITY\SYSTEM by abusing LanguageComponentsInstal…☆36Nov 24, 2024Updated last year
- Beacon Object Files (BOFs) for Cobalt Strike and Havoc C2. Implementations of Active Directory attacks and post-exploitation techniques.☆114Jan 26, 2026Updated 3 months ago
- ☆16Jan 9, 2025Updated last year
- Using call gadgets to break the call stack signature used by Elastic on proxying a module load. Provided as a Crystal Palace shared libra…☆83Nov 6, 2025Updated 6 months ago
- Rainbow table generation & lookup tools.☆34Dec 17, 2025Updated 4 months ago
- A BOF that suspends non-GUI threads for a target process or resumes them resulting in stealthy process silencing.☆57Apr 14, 2025Updated last year
- ProfileHound - BloodHound OpenGraph collector for user profiles stored on domain machines. Make informed decisions about looting secrets …☆162Jan 3, 2026Updated 4 months ago