TROUBLE-1 / AzDevReconLinks
AzDevRecon is a powerful web-based enumeration tool for offensive security professionals, red teamers, and pentesters targeting Azure DevOps. It leverages token-based authentication to uncover projects, repositories, pipelines, secrets, and user permissions helping identify misconfigurations and security gaps in DevOps environments.
☆24Updated 2 months ago
Alternatives and similar repositories for AzDevRecon
Users that are interested in AzDevRecon are comparing it to the libraries listed below
Sorting:
- Scripts to interact with Microsoft Graph APIs☆44Updated last year
- An Ansible collection that installs an ADFS deployment with optional configurations.☆43Updated 3 weeks ago
- Ludus role for deploying a Cobalt Strike Teamserver onto Linux servers☆18Updated 9 months ago
- Claude MCP server to perform analysis on ROADrecon data☆48Updated 9 months ago
- Info related to the Outflank training: Microsoft Office Offensive Tradecraft☆52Updated last year
- Your Skyfall Infrastructure Pack☆89Updated last month
- Ludus roles to deploy ASR rules and MDI auditing settings☆16Updated 5 months ago
- rust port of pspy with support for process monitoring over dbus☆35Updated last week
- SACL Scanner is a tool designed to scan and analyze SACLs.☆48Updated 10 months ago
- Payload Generation Workflow☆40Updated 5 months ago
- A dotnet executable to get an Entra token in an authenticated runtime☆15Updated last year
- A Model Context Protocol (MCP) server to converse with data in Bloodhound☆51Updated 4 months ago
- SATO is a PowerShell tool focuses on providing flexible, multi-grant type support for obtaining, managing, and analyzing Azure tokens.☆18Updated last month
- SMB Audit Tool you were looking for☆23Updated 2 years ago
- ☆52Updated last year
- Mythic C2 wrapper for NimSyscallPacker☆25Updated 9 months ago
- ☆14Updated 2 years ago
- ☆21Updated 3 months ago
- Docker container for running CobaltStrike 4.7 and above☆24Updated 9 months ago
- Find Inbound Email Domains☆35Updated 2 years ago
- ☆64Updated 2 years ago
- POC tool to abuse windows server failover clusters☆53Updated 5 months ago
- A C# project that builds a Web Application which redirects all HTTPS☆26Updated 11 months ago
- ☆15Updated 2 years ago
- ☆47Updated last year
- Quick and dirty PowerShell script to abuse the overly permissive capabilities of the SYSTEM user in a child domain on the Public Key Serv…☆29Updated 2 years ago
- Extract registry and NTDS secrets from local or remote disk images☆45Updated 9 months ago
- A small go tool to upload JSON files to the BloodHound community edition API☆30Updated last year
- ☆42Updated 7 months ago
- Repository for Ludus french templates☆21Updated last month