Alternatives and similar repositories for ADLab

Users that are interested in ADLab are comparing it to the libraries listed below

• techBrandon / CAPs
  Scripts to enumerate and report on Entra Conditional Access
  ☆39Updated last month
• techspence / AppLockerInspector
  Audits an AppLocker policy XML and reports weak/misconfigured/risky settings, including actual ACL checks.
  ☆110Updated last month
• zh54321 / GraphPreConsentExplorer
  A comprehensive list of usable Entra ID first-party clients with pre-consented Microsoft Graph scopes, in a simple YAML-file explorable w…
  ☆129Updated 6 months ago
• sap8899 / Group3rExplorer
  Fun GUI for Group3rs output log
  ☆37Updated 2 years ago
• FuzzySecurity / SANS-HackFest-2023
  ☆49Updated last year
• HackmichNet / AzTokenFinder
  ☆107Updated 2 years ago
• zh54321 / PoCEntraDeviceComplianceBypass
  Simple pure PowerShell POC to bypass Entra / Intune Compliance Conditional Access Policy
  ☆160Updated 7 months ago
• nicolonsky / AzureAiTMFunction
  Azure AiTM Function PoC to phish Entra ID Credentials
  ☆23Updated 11 months ago
• LuccaSA / PingCastle-Notify
  Monitor your PingCastle scans to highlight the rule diff between two scans
  ☆117Updated last month
• Trimarc / Locksmith
  A tiny tool to identify and remediate common misconfigurations in Active Directory Certificate Services
  ☆27Updated 4 months ago
• Phil0x4a / msuserstats
  msuserstats is a comprehensive Powershell tool to manage accounts from Microsoft Entra ID and Active Directory. It supports: a unified vi…
  ☆42Updated 6 months ago
• emiliensocchi / azurehound-queries
  🌩️ Collection of BloodHound queries for Azure
  ☆77Updated 9 months ago
• jakehildreth / PowerPUG
  A tiny tool built to help AD Admins tame the Protected Users group.
  ☆121Updated last month
• csandker / Azure-AccessPermissions
  ☆110Updated 2 years ago
• bouj33boy / Domain-Persistence-Detection-Triage-and-Recovery-SO-CON-2024
  Resources Links for the Research Based on Josh Prager and Nico Shyne's
  ☆13Updated 11 months ago
• sap8899 / reportly
  Reportly is an AzureAD user activity report tool.
  ☆94Updated 2 years ago
• BloodHoundAD / TierZeroTable
  Table of AD and Azure assets and whether they belong to Tier Zero
  ☆27Updated 2 years ago
• notEricaZelic / M365AdminAccessReviewer
  Shows which M365 Objects have Privileged Access and what type (i.e. PIM, Direct, Currently Elevated)
  ☆34Updated 4 months ago
• zh54321 / EntraTokenAid
  A pure PowerShell solution for Entra OAuth authentication, enabling easy retrieval of access and refresh tokens
  ☆110Updated 2 months ago
• secureworks / primary-refresh-token-viewer
  ☆11Updated 2 years ago
• techBrandon / DC32-GOAD
  ☆53Updated last year
• secureworks / BAADTokenBroker
  ☆107Updated 3 months ago
• rootsecdev / Presentations
  Presentations from Conferences
  ☆29Updated last year
• MichaelGrafnetter / active-directory-firewall
  Active Directory Firewall
  ☆82Updated this week
• Synzack / ludus_sccm
  An Ansible collection that installs an SCCM deployment with optional configurations.
  ☆90Updated 3 months ago
• olafhartong / DefenderHarvester
  Expose a lot of MDE telemetry that is not easily accessible in any searchable form
  ☆111Updated last month
• Qazeer / FarsightAD
  PowerShell script that aim to help uncovering (eventual) persistence mechanisms deployed by a threat actor following an Active Directory …
  ☆96Updated 2 months ago
• Ocel0tSec / AzureDump
  Powershell Script to enumerate AzureAD and output good data
  ☆14Updated last year
• h4wkst3r / ADOKit
  Azure DevOps Services Attack Toolkit
  ☆148Updated 6 months ago
• absolomb / FindMeAccess
  ☆119Updated 3 months ago