AADInternals
gerenios/aadinternalsPowerShell module for administering and auditing Azure AD and Office 365, enabling token manipulation, user enumeration, and security assessments of…
authenticationcloud-securityidentity-access-management+2
1.7k
gerenios/aadinternalsPowerShell module for administering and auditing Azure AD and Office 365, enabling token manipulation, user enumeration, and security assessments of…
soteria-security/365inspectA PowerShell script that automates the security assessment of Microsoft 365 environments.
invictus-ir/microsoft-extractor-suiteA PowerShell module for acquisition of data from Microsoft 365 and Azure for Incident Response and Cyber Security purposes.
compasssecurity/entrafalconA lightweight PowerShell tool for assessing the security posture of Microsoft Entra ID environments. It helps identify privileged objects, risky…
darkquasar/azurehunterA Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365
mgeeky/azurertAzureRT - A Powershell module implementing various Azure Red Team tactics
netspi/sqlc2SQLC2 is a PowerShell script for deploying and managing a command and control system that uses SQL Server as both the control server and the agent.
hyd3sec/azur3alph4PowerShell module for post-breach Azure red teaming, automating token extraction, resource enumeration, and lateral movement within managed identity…
joelgmsec/azuregraphPowerShell tool for enumerating Azure AD users, devices, applications, and domains via Microsoft Graph API, with offline data export capability.
zh54321/sharepointdumperPowerShell SharePoint extraction + auditing tool for red/blue/purple teams. Enumerates all SharePoint sites/drives a user can access via Microsoft…
hackmichnet/aztokenfinderOffensive token-harvesting utility that searches x64 process memory and TokenBroker cache files for Azure AD/O365 JWT tokens across Office, Edge,…
offsecpierogi/azureBash and PowerShell scripts for Azure security assessments, covering IAM privilege escalation, container registry exploitation, Key Vault exposure,…
im007/cve-2023-23397PowerShell script to detect and remediate CVE-2023-23397 privilege escalation vulnerability in Microsoft Outlook and Exchange environments.
csandker/azure-accesspermissionsPowerShell script to enumerate Azure Active Directory access permissions, including role assignments, service principals, and privileged access…
mandiant/mandiant-azure-ad-investigatorRead-only PowerShell module for detecting UNC2452 and other threat actor artifacts in Azure AD, auditing federated domains, service principals,…
dafthack/mfasweepA tool for checking if MFA is enabled on multiple Microsoft Services
f-bader/tokentacticsv2A fork of the great TokenTactics with support for CAE and token endpoint v2
