A deliberately vulnerable Microsoft Entra ID environment. Learn identity security through hands-on, realistic attack challenges.
☆981May 6, 2026Updated 4 months ago
Alternatives and similar repositories for EntraGoat
Users that are interested in EntraGoat are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆149Sep 9, 2025Updated 11 months ago
- LudusHound is a tool for red and blue teams that transforms BloodHound data into a fully functional, Active Directory replica environment…☆386Sep 3, 2025Updated last year
- Serverless AITM Simulation Framework for Entra ID and M365☆242Dec 29, 2025Updated 8 months ago
- TokenSmith generates Entra ID access & refresh tokens on offensive engagements. It is suitable for both covert adversary simulations and …☆420Jan 23, 2025Updated last year
- A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.☆1,608Updated this week
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Windows protocol library, including SMB and RPC implementations, among others.☆832Aug 18, 2026Updated 2 weeks ago
- Initial Access and Post-Exploitation Tool for Entra ID and M365 with a browser-based GUI☆1,390Aug 26, 2026Updated last week
- An HTA Application which builds Azure (Entra) Scenarios for Red Team Simulations☆63Aug 18, 2025Updated last year
- Group Policy Objects manipulation and exploitation framework☆319Aug 28, 2026Updated last week
- SCEP request tool for AD CS and Intune☆77Oct 24, 2025Updated 10 months ago
- Go (formerly PowerShell) collector for adding MSSQL attack paths to BloodHound with OpenGraph☆346Jul 10, 2026Updated last month
- BadZure automates the deployment of intentionally misconfigured Entra ID tenants and Azure subscriptions, populating them with diverse en…☆524Aug 27, 2026Updated last week
- Advanced Active Directory network topology analyzer with SMB validation, multiple authentication methods (password/NTLM/Kerberos), and co…☆837May 16, 2026Updated 3 months ago
- A lightweight PowerShell tool for assessing the security posture of Microsoft Entra ID environments. It helps identify privileged object…☆503Aug 24, 2026Updated 2 weeks ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Lab used for workshop and CTF☆535Aug 23, 2026Updated 2 weeks ago
- Advanced Domain Controller attack and credential analysis tool leveraging DonPAPI database☆267Nov 3, 2025Updated 10 months ago
- ☆297Aug 14, 2025Updated last year
- The Azure Execution Tool☆159Feb 6, 2026Updated 7 months ago
- gpoParser is a tool designed to extract and analyze configurations applied through Group Policy Objects (GPOs) in an Active Directory env…☆373Apr 28, 2026Updated 4 months ago
- Lightweight binary that joins a device to a Tailscale network and exposes a local SOCKS5 proxy. Designed for red team operations and ephe…☆572Oct 3, 2025Updated 11 months ago
- A collection of Azure AD/Entra tools for offensive and defensive security purposes☆2,711Aug 5, 2026Updated last month
- Tool to enumerate privileged Scheduled Tasks on Remote Systems☆312Aug 29, 2026Updated last week
- A tool leveraging Kerberos tickets to get Microsoft 365 access tokens using Seamless SSO☆248Aug 25, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Monkey365 is an open-source security assessment tool for Microsoft 365, Azure, and Microsoft Entra ID. It helps security professionals id…☆1,338Updated this week
- A Post-exploitation Toolset for Interacting with the Microsoft Graph API☆1,341Apr 9, 2026Updated 4 months ago
- Proof-of-Concept tool for extracting credential material from protected sessions on modern Windows systems.☆734May 9, 2026Updated 3 months ago
- A comprehensive list of usable Entra ID first-party clients with pre-consented Microsoft Graph scopes, in a simple YAML-file explorable w…☆167Mar 20, 2026Updated 5 months ago
- Misconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive an…☆1,167Aug 28, 2026Updated last week
- A fork of the great TokenTactics with support for CAE and token endpoint v2☆453Aug 17, 2026Updated 3 weeks ago
- ☆659Jul 28, 2026Updated last month
- Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking☆462Jun 27, 2025Updated last year
- ScriptSentry finds misconfigured and dangerous logon scripts.☆668Feb 16, 2026Updated 6 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Abusing Azure services over C2☆381Jan 20, 2026Updated 7 months ago
- game of active directory☆8,287Mar 12, 2026Updated 5 months ago
- A companion tool that uses ADeleg to find insecure trustee and resource delegations in Active Directory☆482Feb 16, 2026Updated 6 months ago
- MDE/MDI Defender setup for Ludus☆62Jul 30, 2026Updated last month
- Two WinForms GUI tools for enumerating, searching, and exfiltrating data from M365 environments using application-level OAuth tokens☆242Mar 4, 2026Updated 6 months ago
- A collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID☆679Jul 6, 2026Updated 2 months ago
- ☆793May 7, 2025Updated last year