
QuietPhase
Pwsh tool for AD Group Enumeration Auditing

Pwsh tool for AD Group Enumeration Auditing

Offline browser-based multi-cloud posture workbench that simulates attack paths, audits IaC compliance, analyzes identity graphs, and maps audit logs…

Active Directory Attack Architecture Map Comprehensive Pentest Reference — From Recon to Domain Dominance

Tactical Identity Operator for Linux & Hybrid Active Directory

Flight recorder and secret scanner for AI coding agents. Reads what Claude Code, Codex, Gemini CLI and 17 more ran, and flags risky actions and…

A modular OSINT & SOCMINT framework for social media intelligence, investigation, and public data analysis.

Defensive research tool that documents observable API endpoints and user agents of offensive tooling targeting Microsoft Entra ID, supporting…

Python3 rewrite of AsOutsider features of AADInternals

Enumerate user accounts and registered authentication methods via the Microsoft Self-Service Password Reset (SSPR) portal

Security research disclosing CVE-2026-9794, an unauthenticated client ID enumeration flaw in Keycloak SAML ECP via faultstring oracle, fixed in…

Ask the Web Account Manager (WAM) for Entra ID tokens

PowerShell MachineAccountQuota and DNS exploit tools