netskopeoss / phish_oauthLinks
POC code to explore phishing attacks using OAuth 2.0 authorization flows, such as the device authorization grant.
☆35Updated 4 years ago
Alternatives and similar repositories for phish_oauth
Users that are interested in phish_oauth are comparing it to the libraries listed below
Sorting:
- Azure AD RedTeam Full Enumeration Script used to query all aspects of your target Azure tenant.☆68Updated last year
- Covenant is a collaborative .NET C2 framework for red teamers.☆41Updated 4 years ago
- Resolves an IP address to the cloud provider it is hosted on☆97Updated last week
- A Python implementation of dafthack's MSOLSpray. A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if …☆94Updated last year
- ☆116Updated 4 years ago
- Protocol agnostic online password guessing API.☆84Updated 2 years ago
- ☆70Updated 2 years ago
- ☆139Updated 2 years ago
- This script is a multi-threaded Okta password sprayer.☆71Updated last year
- ☆69Updated 4 years ago
- Parses Nessus .nessus files for exploitable vulnerabilities and outputs a report file in format MM-DD-YYYY-nessus.csv☆40Updated 2 months ago
- Material for the "Hands-On BloodHound" Workshop☆110Updated 4 years ago
- TA505+ Adversary Simulation☆65Updated 4 years ago
- ☆80Updated 5 years ago
- HTTP(s) Screenshots for Pen Testers Who Value Their Time☆84Updated 11 months ago
- User enumeration with Microsoft Teams API☆174Updated 4 years ago
- Modular Enumeration and Password Spraying Framework☆128Updated last year
- Slackhound allows red and blue teams to perform fast reconnaissance on Slack workspaces/organizations to quickly search user profiles, lo…☆83Updated 2 months ago
- Fly into Gophish with One Click (Infra Automation)☆50Updated 2 years ago
- GoldenSAML Attack Libraries and Framework☆75Updated last year
- POC of SecureWorks' recent Azure Active Directory password brute-forcing vuln☆191Updated 4 years ago
- A very simple lab to demo some Terraform, DSC, Inspec and Gitlab CI☆93Updated 2 years ago
- ☆118Updated 4 years ago
- A proof-of-concept script to conduct a phishing attack abusing Microsoft 365 OAuth Authorization Flow☆103Updated 4 years ago
- Tool for assessing on-premises Microsoft servers authentication such as ADFS, Skype, Exchange, and RDWeb☆149Updated 4 years ago
- A PowerShell script that checks for dangerous ACLs on system hives and shadows☆28Updated 4 years ago
- ☆48Updated last month
- Lateral Movement graph for Azure Active Directory☆124Updated 2 years ago
- Enumerate Microsoft 365 Groups in a tenant with their metadata☆55Updated 4 years ago
- Quick and dirty dynamic redirect.rules generator☆166Updated 3 years ago