cloud-architekt/azuread-attack-defenseThis publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can…
jenderal92/shadow-vaultShadow Vault – Add shadow users with SHA-512 hash, auto aging match, multiple write fallbacks.
praetorian-inc/oauthseekerA malicious OAuth application that can be leveraged for both internal and external phishing attacks targeting Microsoft Azure and Office365 users.
pushsecurity/browser-identity-attacks-matrixOffensive security drives defensive security. We're sharing a collection of SaaS attack techniques to help defenders understand the threats they…
cisagov/scubagearAutomation to assess the state of your M365 tenant against CISA's baselines
katrielmoses/mailaccessFree email OSINT tool, 2500+ platforms, identity clustering, breach detection. No API keys required. pip install mailaccess
f-bader/tokentacticsv2A fork of the great TokenTactics with support for CAE and token endpoint v2
vectra-ai-research/maad-afMAAD Attack Framework - An attack tool for simple, fast & effective security testing of M365 & Entra ID (Azure AD).
randomaccess3/awesome-becRepository of attack and defensive information for Business Email Compromise investigations
galvnyz/m365-assess290+ Automated checks across 14 compliance frameworks, interactive HTML report, no data leaves your machine.
redbyte1337/credspyEntra ID user enumeration and auth method discovery via the public GetCredentialType API
temp43487580/entrapassthecerttool for requesting Entra ID's P2P certificate and authenticating to a remote Entra joinned devices with it
vhscom/private-landing🔐 Learn authentication by building it right. An extensible, standards-compliant reference implementation for Cloudflare Workers with Hono, Turso,…
