area51
thoropass-public/area51The exploit server for out-of-band findings. Point a target at a domain you own. Every HTTP request and every email it sends back lands in a…
api-security-testingcloud-securityemail-security+4
thoropass-public/area51The exploit server for out-of-band findings. Point a target at a domain you own. Every HTTP request and every email it sends back lands in a…
randomaccess3/awesome-becRepository of attack and defensive information for Business Email Compromise investigations
spyata123/cve-2023-3128Python script to detect CVE-2023-3128 authentication bypass in Grafana via Azure AD email claim validation. Checks Azure AD SSO configuration and…
shoucheng3/asf__james-project_cve-2022-22931_3-6-0Modular Java mail server supporting IMAP, SMTP, POP3, and JMAP with Docker deployment, distributed architecture, and CLI management for secure…
daryllundy/cve-2025-32711PowerShell-based detection and remediation toolkit for CVE-2025-32711 (EchoLeak), a critical zero-click AI command injection vulnerability in…
galvnyz/m365-assess290+ Automated checks across 14 compliance frameworks, interactive HTML report, no data leaves your machine.
sublime-security/ics-phishing-toolkitOpen source tooling to stop ICS phishing (malicious calendar invites)
redbyte1337/credspyEntra ID user enumeration and auth method discovery via the public GetCredentialType API
chrismaddalena/odinAutomated network asset, email, and social media profile discovery and cataloguing.
rvrsh3ll/tokentacticsAzure JWT Token Manipulation Toolset
iamthefrogy/frogy2.0Orbis is an full spectrum automated external attack surface intelligent toolkit.
nodauf/gomapenumUser enumeration and password bruteforce on Azure, ADFS, OWA, O365, Teams and gather emails on Linkedin
qsecure-labs/overlordPython-based CLI for automated red team infrastructure deployment on AWS and Digital Ocean, with modular support for C2, email servers, HTTP…
cnotin/m365_groups_enumEnumerate Microsoft 365 Groups in a tenant with their metadata