cartography-cncf/cartographyPulls infrastructure assets and their relationships from 30+ cloud, identity, and SaaS platforms into a Neo4j graph for security queries and…
squidsec/bloodbashOffline AD/Entra attack-path analyzer for SharpHound/AzureHound JSON. Surfaces prioritized privilege escalation, credential, and misconfiguration…
specterops/bloodhoundSix Degrees of Domain Admin
katrielmoses/mailaccessFree email OSINT tool, 2500+ platforms, identity clustering, breach detection. No API keys required. pip install mailaccess
dobybaxter127/nimbus-vestigeA forensic reconstruction engine for cloud and identity incident response.
trappsec-dev/trappsecOpen-source framework for embedding realistic decoy routes and honey fields into APIs to detect attackers probing business logic, converting…
dirkjanm/roadtoolsA collection of Azure AD/Entra tools for offensive and defensive security purposes
franc-pentest/ldeepIn-depth ldap enumeration utility
bishopfox/cirroCreating attacks paths across management and data planes
redbyte1337/credspyEntra ID user enumeration and auth method discovery via the public GetCredentialType API
compasssecurity/entrafalconA lightweight PowerShell tool for assessing the security posture of Microsoft Entra ID environments. It helps identify privileged objects, risky…
ustayready/thunderstormA collector and derivation engine. It maps your environment, evaluates effective permissions and trust, and writes a complete attack graph as a…
aurva-io/aiostackAI runtime inventory: discover shadow AI, trace LLM calls
specterops/githoundBloodHound OpenGraph collector for GitHub that maps organization structure, permissions, and cross-cloud attack paths into a navigable graph for…
rootsecdev/secretsstalkerRead-only Entra ID app-credential assessment: enumerates Graph permissions, Azure RBAC, and reachable cloud data, then maps findings to…
karitamw/printnightmare-detection-mitigation-labSanitised Windows security lab demonstrating Active Directory administration, host and network detection, and layered mitigation of CVE-2021-34527.
offsecpierogi/azureBash and PowerShell scripts for Azure security assessments, covering IAM privilege escalation, container registry exploitation, Key Vault exposure,…
t94j0/adexplorersnapshot-rsConverts Active Directory Explorer snapshot (.dat) files into BloodHound CE JSON archives for graph-based AD attack-path analysis and reconnaissance.
