netskopeoss / phish_oauthLinks
POC code to explore phishing attacks using OAuth 2.0 authorization flows, such as the device authorization grant.
☆35Updated 4 years ago
Alternatives and similar repositories for phish_oauth
Users that are interested in phish_oauth are comparing it to the libraries listed below
Sorting:
- Covenant is a collaborative .NET C2 framework for red teamers.☆41Updated 4 years ago
- A Python implementation of dafthack's MSOLSpray. A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if …☆97Updated last year
- Azure AD RedTeam Full Enumeration Script used to query all aspects of your target Azure tenant.☆69Updated last year
- Resolves an IP address to the cloud provider it is hosted on☆98Updated this week
- ☆139Updated 2 years ago
- ☆119Updated 4 years ago
- ☆70Updated 2 years ago
- Fly into Gophish with One Click (Infra Automation)☆52Updated 2 years ago
- ☆80Updated 6 years ago
- ☆69Updated 4 years ago
- This script is a multi-threaded Okta password sprayer.☆71Updated 2 years ago
- HTTP(s) Screenshots for Pen Testers Who Value Their Time☆85Updated last year
- Material for the "Hands-On BloodHound" Workshop☆111Updated 4 years ago
- Modular Enumeration and Password Spraying Framework☆128Updated last year
- ☆119Updated 4 years ago
- GoldenSAML Attack Libraries and Framework☆77Updated last year
- A very simple lab to demo some Terraform, DSC, Inspec and Gitlab CI☆94Updated 3 years ago
- TA505+ Adversary Simulation☆65Updated 5 years ago
- User enumeration with Microsoft Teams API☆175Updated 4 years ago
- Enumerate Microsoft 365 Groups in a tenant with their metadata☆55Updated 4 years ago
- Slackhound allows red and blue teams to perform fast reconnaissance on Slack workspaces/organizations to quickly search user profiles, lo…☆81Updated 5 months ago
- Dynamic Labs is an open source tool aimed at red teamers and pentesters for the quick deployment of flexible, transient and cloud-hosted …☆63Updated 2 years ago
- Protocol agnostic online password guessing API.☆85Updated 2 years ago
- Password Spraying Script detecting current and previous passwords of Active Directory User☆66Updated 4 years ago
- A proof-of-concept script to conduct a phishing attack abusing Microsoft 365 OAuth Authorization Flow☆104Updated 4 years ago
- ☆36Updated last year
- Parses Nessus .nessus files for exploitable vulnerabilities and outputs a report file in format MM-DD-YYYY-nessus.csv☆41Updated 5 months ago
- A PowerShell script that checks for dangerous ACLs on system hives and shadows☆28Updated 4 years ago
- Lookup for interesting stuff in SMB shares☆151Updated 2 years ago
- A tool to assist in the development of landing pages for phishing campaigns☆16Updated 3 years ago