A proof-of-concept script to conduct a phishing attack abusing Microsoft 365 OAuth Authorization Flow
☆107Aug 17, 2021Updated 5 years ago
Alternatives and similar repositories for Microsoft365_devicePhish
Users that are interested in Microsoft365_devicePhish are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- rustyIron is a tool that takes advantage of functionality within Ivanti's MobileIron MDM solution to perform single-factor authentication…☆44Mar 22, 2021Updated 5 years ago
- (kinda) Malicious Outlook Reader☆19Mar 2, 2021Updated 5 years ago
- User enumeration with Microsoft Teams API☆177Jul 9, 2021Updated 5 years ago
- (kinda) Malicious Outlook Reader☆137Mar 3, 2021Updated 5 years ago
- Phishing Abusing Microsoft 365 OAuth Authorization Flow☆26Dec 17, 2021Updated 4 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Using outlook COM objects to create convincing phishing emails without the user noticing. This project is meant for internal phishing.☆157Dec 22, 2020Updated 5 years ago
- A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors.☆296Aug 18, 2023Updated 3 years ago
- Generates statistics based on output from CrackMapExec. Ideal for enumeration of host-based controls.☆13Oct 23, 2026Updated last week
- Low and slow password spraying tool, designed to spray on an interval over a long period of time☆224Jan 30, 2026Updated 9 months ago
- Read Excel Spreadsheets (XLS/XLSX) using Cobalt Strike's Execute-Assembly☆89Sep 30, 2024Updated 2 years ago
- Scripts to automate standing up apache2 with mod_rewrite in front of C2 servers.☆47Feb 17, 2021Updated 5 years ago
- An Office365 User Attack Tool☆650Mar 19, 2024Updated 2 years ago
- Password attacks and MFA validation against various endpoints in Azure and Office 365☆153Feb 10, 2023Updated 3 years ago
- Fly into Gophish with One Click (Infra Automation)☆52Mar 30, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Azure JWT Token Manipulation Toolset☆737Dec 6, 2024Updated last year
- Exactly what it sounds like, which is something rad☆22Oct 12, 2022Updated 4 years ago
- Federated Office365 user enumeration based on correlated response trend analysis☆49May 3, 2022Updated 4 years ago
- Agressor script for Cobalt Strike to mark users as owned in bloodhound from the Cobalt Strike credentials tab.☆14Dec 21, 2019Updated 6 years ago
- cobalt strike tools☆32Nov 4, 2021Updated 4 years ago
- Brute force attack tool for Azure AD Autologon/Seamless SSO - Source: https://arstechnica.com/information-technology/2021/09/new-azure-ac…☆108Jun 27, 2024Updated 2 years ago
- Hide cool stuff in images :)☆143Aug 9, 2020Updated 6 years ago
- Extendable payload obfuscation and delivery framework☆143Nov 4, 2022Updated 4 years ago
- OAuth Device Code Authorization Phishing Script☆11Oct 21, 2021Updated 5 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Roast in the Middle☆296Sep 17, 2026Updated last month
- Self-developed tools for Lateral Movement/Code Execution☆722Aug 17, 2021Updated 5 years ago
- Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus on Windows 10 64-bit)☆16Sep 4, 2020Updated 6 years ago
- DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.☆322Sep 23, 2022Updated 4 years ago
- A tool to be used in post exploitation phase for blue and red teams to bypass APPLICATIONCONTROL policies☆324Apr 8, 2023Updated 3 years ago
- Generate droppers with encrypted payloads automatically.☆52Nov 16, 2021Updated 4 years ago
- Process Monitor filter for finding privilege escalation vulnerabilities on Windows☆78Jun 9, 2021Updated 5 years ago
- A password guessing tool that targets the Kerberos and LDAP services within the Windows Active Directory environment.☆440Aug 18, 2023Updated 3 years ago
- Just a PoC to turn xlsx (regular Excel files) into xlsm (Excel file with macro) and slipping inside a macro (vbaProject.bin)☆143Sep 4, 2021Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Passive Security Tools Fingerprinting Framework☆74Mar 26, 2021Updated 5 years ago
- Maximizing BloodHound. Max is a good boy.☆534Apr 25, 2025Updated last year
- Convert Cobalt Strike profiles to IIS web.config files☆114Aug 23, 2021Updated 5 years ago
- Easy red team phishing with Puppeteer☆136Feb 6, 2023Updated 3 years ago
- Another meterpreter injection technique using C# that attempts to bypass Defender☆264Oct 20, 2021Updated 5 years ago
- Just some random Red Team Scripts that can be useful☆155May 12, 2026Updated 5 months ago
- Collection of offensive tools targeting Microsoft Azure☆228Oct 26, 2026Updated last week