
CredMaster
Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling

Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling

Password spraying using AWS Lambda for IP rotation

Subdomain brute-forcing tool that enumerates existing subdomains and detects misconfigured cloud-hosted subdomains vulnerable to takeover across AWS,…

:smiley_cat: Running Hashcat on Google Colab with session backup and restore.

Robust Subdomain Takeover Tool

A tool that can help detect and takeover subdomains with dead DNS records

User enumeration and password spraying tool for testing Azure AD

Fast subdomain takeover scanner with 50+ signatures, supporting cloud provider integrations (AWS, Azure, Cloudflare) and CI/CD pipeline mode for…

Determine privileges from cloud credentials via brute-force testing.

A fast enumeration tool for publicly exposed Azure Storage blobs.

User enumeration and password bruteforce on Azure, ADFS, OWA, O365, Teams and gather emails on Linkedin

Python3 tool to perform password spraying against Microsoft Online service using various methods