jumpserver/jumpserverJumpServer is an open-source Privileged Access Management (PAM) platform that provides DevOps and IT teams with on-demand and secure access to SSH,…
cloudflare/cloudflaredClient for Cloudflare Tunnel enabling secure outbound-only connections to origins via Zero Trust architecture. Supports HTTP, WebSocket, SSH, and RDP…
specterops/bloodhoundSix Degrees of Domain Admin
compasssecurity/entrafalconA lightweight PowerShell tool for assessing the security posture of Microsoft Entra ID environments. It helps identify privileged objects, risky…
pomerium/pomeriumIdentity-aware reverse proxy that delivers zero-trust access to internal apps and services via context-aware policy, continuous verification, and no…
squidsec/bloodbashOffline AD/Entra attack-path analyzer for SharpHound/AzureHound JSON. Surfaces prioritized privilege escalation, credential, and misconfiguration…
ricardojoserf/adduser-samrCreate local administrators with the SAMR API (lowest-level technique). Implemented in C#, Crystal, Python and Rust
sap/macos-enterprise-privilegesThis application gives Mac users in enterprise environments control over the administration of their machines by elevating their access level to…
rootsecdev/secretsstalkerRead-only Entra ID app-credential assessment: enumerates Graph permissions, Azure RBAC, and reachable cloud data, then maps findings to…
mvelazc0/badzureBadZure automates the deployment of intentionally misconfigured Entra ID tenants and Azure subscriptions, populating them with diverse entities and…
karitamw/printnightmare-detection-mitigation-labSanitised Windows security lab demonstrating Active Directory administration, host and network detection, and layered mitigation of CVE-2021-34527.
zephrfish/azureattackkitCollection of Azure Tools to Pull down for Attacking an Environment + quick tips and other useful information
offsecpierogi/azureBash and PowerShell scripts for Azure security assessments, covering IAM privilege escalation, container registry exploitation, Key Vault exposure,…
eshlomo1/cloudsecMaster the art of cloud exploitation. A specialized resource for offensive security researchers and red teamers focused on weaponizing…
contrastsecurity/contrastSAST CLI for scanning Java, JavaScript, and .NET applications plus AWS Lambda functions, detecting code vulnerabilities and over-permissive IAM…
rajsidwadkar/uap-protocolA unified, security-first wire protocol for tool access and agent coordination. UAP eliminates CVE-2025-49596 and MCP tool-poisoning vulnerabilities…
jenderal92/shadow-vaultShadow Vault – Add shadow users with SHA-512 hash, auto aging match, multiple write fallbacks.
semperis/entragoatA deliberately vulnerable Microsoft Entra ID environment. Learn identity security through hands-on, realistic attack challenges.
