daddycocoaman / azbelt
AAD related enumeration in Nim
☆127Updated last year
Related projects: ⓘ
- Collection of tools to use with Azure Applications☆107Updated 11 months ago
- Hybrid AD utilities for ROADtools☆59Updated last month
- ☆99Updated last year
- Abuse Azure API permissions for red teaming☆55Updated last year
- ☆141Updated 10 months ago
- IronSharpPack is a repo of popular C# projects that have been embedded into IronPython scripts that execute an AMSI bypass and then refle…☆104Updated 4 months ago
- ☆83Updated 2 years ago
- ☆144Updated 7 months ago
- ☆38Updated 5 months ago
- Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel☆85Updated 2 months ago
- Grab NetNTLMv2 hashes using ETW with administrative rights on Windows 8.1 / Windows Server 2016 and later☆88Updated last year
- Microsoft Graph API post-exploitation toolkit☆90Updated 2 months ago
- pysnaffler☆83Updated 3 weeks ago
- Artificially inflate a given binary to exceed common EDR file size limits. Can be used to bypass common EDR.☆116Updated 2 years ago
- ☆45Updated this week
- Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) SMB shares☆152Updated last year
- C# implementation of TokenFinder. Steal M365 access tokens from Office Desktop apps☆131Updated last month
- ☆21Updated this week
- Find .net assemblies locally☆85Updated last year
- Slide decks and/or materials from conference presentations☆55Updated last year
- A python port of @dafthack's MFAsweep with some added OPSEC functionality. MFAde can be used to find single-factor authentication failure…☆28Updated last year
- Disconnected GPO Editor - A Group Policy Manager launcher to allow editing of domain GPOs from non-domain joined machines☆55Updated 2 weeks ago
- Some scripts to support with importing large datasets into BloodHound☆75Updated 9 months ago
- ☆110Updated last year
- Resources Links for the Research Based on Josh Prager and Nico Shyne's☆12Updated 6 months ago
- ☆20Updated 5 months ago
- A PowerShell script to perform PKINIT authentication with the Windows API from a non domain-joined machine.☆105Updated 4 months ago
- Two in one, patch lifetime powershell console, no more etw and amsi!☆79Updated 2 months ago
- Investigation about ACL abusing for Active Directory Certificate Services (AD CS)☆118Updated 2 years ago
- ☆33Updated 11 months ago