A cheatsheet of commands used to pass the CARTP (Certified Azure Red Team Professional) exam.
☆27May 4, 2023Updated 3 years ago
Alternatives and similar repositories for pentesting-azure-ad
Users that are interested in pentesting-azure-ad are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Fast-track Azure offensive security toolkit designed for CARTP certification and CTF competitions. Automated enumeration, credential extr…☆27Dec 5, 2025Updated 9 months ago
- Collection of templates for linux☆10Jun 2, 2024Updated 2 years ago
- CyberShield 2025 Intro to EDR Evasion Class☆18Jun 3, 2025Updated last year
- Pure PowerShell port of PassTheCert tool to authenticate to an LDAP/S server with a certificate through Schannel☆18May 22, 2026Updated 3 months ago
- Collection of powershell scripts I used to complete my CARTP and CARTE courses.☆49Feb 27, 2026Updated 6 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Random scripts that I used in the CARTP course lab & final exam.☆16Feb 28, 2024Updated 2 years ago
- AzureAD Pentest☆25Mar 24, 2022Updated 4 years ago
- Quick and dirty PowerShell script to abuse the overly permissive capabilities of the SYSTEM user in a child domain on the Public Key Serv…☆30Jul 25, 2023Updated 3 years ago
- ☆28Aug 11, 2025Updated last year
- GeoServer & GeoTools SQL Injection (CVE-2023-25157 & CVE-2023-25158)☆14Jun 11, 2023Updated 3 years ago
- C# shellcode runner adapted to run from a csproj to be triggered by MSBuild☆26Feb 11, 2022Updated 4 years ago
- ☆14Aug 26, 2026Updated last week
- A command-line tool for reconnaissance and targeted write operations on Confluence and Jira instances.☆14Jan 15, 2025Updated last year
- This repository mainly focuses on various techniques, tools, frameworks and approach to perform offensive exploitation of AWS infrastruct…☆12Jun 12, 2019Updated 7 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Token impersonation in PowerShell to execute under the context of another user.☆25Oct 14, 2025Updated 10 months ago
- This repository contains a framework of curated Azure penetration testing tools that are specifically designed to help you identify and m…☆26May 13, 2023Updated 3 years ago
- A python port of CCob's ThreadlessInject☆25Mar 18, 2023Updated 3 years ago
- ADAttributeHound is an OpenGraph extension for BloodHound that exports Active Directory custom attributes as node properties.☆22Jun 18, 2026Updated 2 months ago
- AzDevRecon is a powerful web-based enumeration tool for offensive security professionals, red teamers, and pentesters targeting Azure Dev…☆31Oct 13, 2025Updated 10 months ago
- A simple OAuth App designed to capture OAuth tokens when users authenticate through GitHub OAuth flow.☆27Apr 20, 2026Updated 4 months ago
- Exploit for CVE-2023-38571☆13Sep 27, 2023Updated 2 years ago
- Templating with sinister modules☆16Jun 20, 2023Updated 3 years ago
- Evasive shellcode loader with indirect syscalls, Thread name-calling allocation, PoolParty injection☆10Feb 26, 2025Updated last year
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- SIP Tools☆14Sep 15, 2016Updated 9 years ago
- ☆61Jan 4, 2022Updated 4 years ago
- Powershell Script to enumerate AzureAD and output good data☆14Nov 8, 2023Updated 2 years ago
- All the content from my Troopers 19 talk☆10Mar 20, 2019Updated 7 years ago
- Request device ticket/token using the device's MSA☆36Aug 25, 2025Updated last year
- A service container for interacting with SRA's VECTR☆18Apr 9, 2025Updated last year
- ☆19Aug 13, 2026Updated 3 weeks ago
- Exotic and uncommon XSS Vectors to hit the target as quickly as possible.☆21May 27, 2020Updated 6 years ago
- A PowerShell script designed to detect misconfigured Azure Storage Accounts that could potentially be exploited for privilege escalation …☆13Apr 25, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Offensive Assembly code snippets.☆15Jul 12, 2023Updated 3 years ago
- Library that provides Python examples for interacting with the Cobalt Strike REST API☆25Nov 26, 2025Updated 9 months ago
- A simple rpc2socks alternative in pure Go.☆32Jul 8, 2024Updated 2 years ago
- Welcome to RFS notes to CRTP - Certified Red Team Professional by Altered Security.☆28Aug 20, 2024Updated 2 years ago
- Password spraying script and helper for creating password lists☆34Sep 4, 2020Updated 6 years ago
- Command-line tool to identify useragents that bypasses proxy restrictions☆13Oct 23, 2025Updated 10 months ago
- Malware detonation platform Polygon integration☆10Aug 1, 2023Updated 3 years ago