Alternatives and similar repositories for CAPs

Users that are interested in CAPs are comparing it to the libraries listed below

• techspence / AppLockerInspector
  Audits an AppLocker policy XML and reports weak/misconfigured/risky settings, including actual ACL checks.
  ☆33Updated this week
• HackmichNet / AzTokenFinder
  ☆107Updated 2 years ago
• BloodHoundAD / TierZeroTable
  Table of AD and Azure assets and whether they belong to Tier Zero
  ☆27Updated last year
• nicolonsky / AzureAiTMFunction
  Azure AiTM Function PoC to phish Entra ID Credentials
  ☆23Updated 10 months ago
• sap8899 / Group3rExplorer
  Fun GUI for Group3rs output log
  ☆37Updated 2 years ago
• zh54321 / GraphPreConsentExplorer
  A comprehensive list of usable Entra ID first-party clients with pre-consented Microsoft Graph scopes, in a simple YAML-file explorable w…
  ☆122Updated 4 months ago
• emiliensocchi / azurehound-queries
  🌩️ Collection of BloodHound queries for Azure
  ☆75Updated 7 months ago
• FuzzySecurity / SANS-HackFest-2023
  ☆49Updated last year
• secureworks / primary-refresh-token-viewer
  ☆11Updated 2 years ago
• sleeptok3n / RoleCrawl
  ☆21Updated last year
• ASOT-LABS / TeamsBreaker
  ☆46Updated last year
• secureworks / BAADTokenBroker
  ☆107Updated 2 months ago
• notEricaZelic / M365AdminAccessReviewer
  Shows which M365 Objects have Privileged Access and what type (i.e. PIM, Direct, Currently Elevated)
  ☆33Updated 3 months ago
• secureworks / TokenMan
  ☆103Updated 2 years ago
• bouj33boy / Domain-Persistence-Detection-Triage-and-Recovery-SO-CON-2024
  Resources Links for the Research Based on Josh Prager and Nico Shyne's
  ☆13Updated 10 months ago
• techspence / BadShares
  A tool to create randomly insecure file shares that also contain unsecured credential files
  ☆45Updated last year
• absolomb / FindMeAccess
  ☆112Updated last month
• atomicchonk / roadrecon_mcp_server
  Claude MCP server to perform analysis on ROADrecon data
  ☆45Updated 4 months ago
• Ocel0tSec / AzureDump
  Powershell Script to enumerate AzureAD and output good data
  ☆14Updated last year
• improsec / 2Cloudz
  ☆25Updated 3 years ago
• nyxgeek / azure_survey_2025
  results of scraping OneDrive from February 2022 - March 2025
  ☆25Updated 3 months ago
• csandker / Azure-AccessPermissions
  ☆109Updated 2 years ago
• bagelByt3s / ludus_adfs
  An Ansible collection that installs an ADFS deployment with optional configurations.
  ☆42Updated 8 months ago
• sap8899 / reportly
  Reportly is an AzureAD user activity report tool.
  ☆95Updated 2 years ago
• zh54321 / EntraTokenAid
  A pure PowerShell solution for Entra OAuth authentication, enabling easy retrieval of access and refresh tokens
  ☆108Updated last month
• Trimarc / Locksmith
  A tiny tool to identify and remediate common misconfigurations in Active Directory Certificate Services
  ☆27Updated 2 months ago
• spyr0-sec / AutomatedBadLab
  PowerShell scripts to create sandboxed or vulnerable environments using HyperV and AutomatedLab
  ☆86Updated last month
• kidtronnix / restless-guest
  An offensive toolkit for restless guests #DEFCON33
  ☆46Updated 2 weeks ago
• MorDavid / DCSyncHound
  This script analyzes the DCSync output file from several tools (such as Mimikatz, Secretsdump and SharpKatz...)
  ☆51Updated 5 months ago
• SySS-Research / azurenum
  Enumerate Microsoft Entra ID (Azure AD) fast
  ☆93Updated 4 months ago