365inspect

A PowerShell script that automates the security assessment of Microsoft Office 365 environments.

aad-sso-enum-brute-spray

POC of SecureWorks' recent Azure Active Directory password brute-forcing vuln

aadinternals

AADInternals PowerShell module for administering Azure AD and Office 365

aaronlocker

Robust and practical application control for Windows

accomplice

Tools for discovery and abuse of COM hijacks

aced

aceldr

Cobalt Strike UDRL for memory scanner evasion.

aclpwn.py

Active Directory ACL exploitation with BloodHound

acme.sh

A pure Unix shell script implementing ACME client protocol

active-directory-dotnet-desktop-msgraph-v2

Sample showing how a Windows desktop .NET (WPF) application can get an access token using MSAL.NET and call the Microsoft Graph API or other APIs protected by the Microsoft identity platform (Azure Active Directory v2)

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

adaz

Automatically deploy customizable Active Directory labs in Azure

adconnectdump

Dump Azure AD Connect credentials for Azure AD and Active Directory

adcspwn

A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certificate service.

adenum

Active Directory Enumeration Tool

adexplorersnapshot.py

ADExplorerSnapshot.py is an AD Explorer snapshot parser. It is made as an ingestor for BloodHound, and also supports full-object dumping to NDJSON.

admodule

Microsoft signed ActiveDirectory PowerShell module

adokit

Azure DevOps Services Attack Toolkit

adsrunner

Write a UUIDs bytes array "*" collected to the Alternate Data Stream of the current binary , then the ADS Runner will get the DATA tranfert it into a char table nice UUIDS shellcode and Run it

advanced-sql-injection-cheatsheet

A cheat sheet that contains advanced queries for SQL Injection of all types.

aggressor_scripts_collection

Collection of various Aggressor Scripts for Cobalt Strike from awesome people. Will be sure to update this repo with credit to each person.

aggressorassessor

Aggressor scripts for phases of a pen test or red team assessment

aggressorscripts

Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources

aggressorscripts-1

Aggressor scripts for use with Cobalt Strike 3.0+

aiosmb

Fully asynchronous SMB library written in pure python

aircross

airCross is a tool that takes advantage of API functionality within VMWare's AirWatch MDM solution to perform single-factor authentication attacks. airCross can locate AirWatch authentication endpoint, validate the authentication strategy of the environment, collect GroupID authentication values, conduct single-factor authentication, and perform us

alaris

A protective and Low Level Shellcode Loader the defeats modern EDR systems.

aldpro

Install ALD Pro

aldpro-domain-github

youtube

alexa-topsites

A Python script to scrape the top sites from for a particular country