M365-Assess
galvnyz/m365-assess290+ Automated checks across 14 compliance frameworks, interactive HTML report, no data leaves your machine.
vulnerability-analysisconfiguration-auditingcloud-security+4
189
Tools for managing user identities, authentication, authorization, and access controls within systems and networks.
galvnyz/m365-assess290+ Automated checks across 14 compliance frameworks, interactive HTML report, no data leaves your machine.
synacktiv/captaincredzCaptainCredz is a modular and discreet password-spraying tool.
bp2008/dahualoginbypassChrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.
sachitrafa/yourmemoryAgentic AI memory with Ebbinghaus forgetting curve decay. +16pp better recall than Mem0 on LoCoMo.
logangoins/cable.NET post-exploitation toolkit for Active Directory reconnaissance and exploitation
kontext-security/kontext-cliRuntime Security for tool-using AI agents, with local policies, pre-action enforcement, and forensic audit trails.
ory/talosScalable API key server for issuing, verifying, and revoking credentials with token derivation for fine-grained capability tokens. Supports…
simioni87/auth_analyzerBurp Extension for testing authorization issues. Automated request repeating and parameter value extraction on the fly.
redbyte1337/credspyEntra ID user enumeration and auth method discovery via the public GetCredentialType API
zephrfish/azureattackkitCollection of Azure Tools to Pull down for Attacking an Environment + quick tips and other useful information
treebuilder/aad-sso-enum-brute-sprayPOC of SecureWorks' recent Azure Active Directory password brute-forcing vuln
nicolonsky/conditionalaccessdocumentationMicrosoft Entra Conditional Access Documentation with PowerShell
ibm-security/ibmsecurityIdempotent functions for IBM Security Appliance REST APIs. Currently covering ISAM and ISDS Appliances.
jatin-dot-py/instagram-private-bypassThis repository discloses a server-side authorization bypass in Instagram, which allowed unauthenticated access to private timelines; it seems likely…
logisek/evilmistEvilMist is a collection of scripts and utilities designed to support cloud penetration testing & red teaming. The toolkit helps identify…
akabe1/oauthscanBurp Suite Extension useful to verify OAUTHv2 and OpenID security
soledad208/cve-2018-10933CVE-2018-10933 very simple POC