Tools

fyoorer/shadowclone

Serverless task distribution framework that parallelizes CLI tools across thousands of cloud functions for rapid reconnaissance and data processing.

hashicorp-forge/grove

A Software as a Service (SaaS) log collection framework.

dirkjanm/roadtools

A collection of Azure AD/Entra tools for offensive and defensive security purposes

metarget/metarget

Metarget is a framework providing automatic constructions of vulnerable infrastructures.

shaheryar773/mitigate-cve-2026-23869-react-server-component-loops

Technical troubleshooting repository for fixing infinite rendering vulnerability loops and resource exhaustion threats under CVE-2026-23869 cleanly.

rhinosecuritylabs/pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

vectra-ai-research/maad-af

MAAD Attack Framework - An attack tool for simple, fast & effective security testing of M365 & Entra ID (Azure AD).

jumpseclabs/tokenflare

Serverless AITM Simulation Framework for Entra ID and M365

luemmelsec/apex

Azure Post Exploitation Framework

bhdresh/dejavu

DejaVU - Open Source Deception Framework

certologists/modified-cve-2024-37081-poc

Proof of concept for VMware vCenter CVE-2024-37081, modified to enhance usability for security testing and validation of the vulnerability.

secureworks/whiskeysamlandfriends

Python-based framework for generating Golden SAML tokens, Kerberos tickets, and Azure Access Tokens to exploit federated identity systems and…

osirislab/awesome-rust-security

Curated list of awesome projects and resources related to Rust and computer security

owasp/odtm

OWASP Ontology-driven Threat Modelling framework

acheiii/cve-2023-28432

CVE-2023-28432 POC

mr-xn/cve-2023-28432

CVE-2023-28434 nuclei templates

m-mizutani/alertresponder

Automatic security alert response framework by AWS Serverless Application Model