zha0 Goto Github PK

aws-enumerator

The AWS Enumerator was created for service enumeration and info dumping for investigations of penetration testers during Black-Box testing. The tool is intended to speed up the process of Cloud review in case the security researcher compromised AWS Account Credentials.

aws-iam-privilege-escalation

A centralized source of all AWS IAM privilege escalation methods released by Rhino Security Labs.

aws-threat-simulation-and-detection

Playing around with Stratus Red Team (Cloud Attack simulation tool) and SumoLogic

aws_eks_cluster_forensics

AWS EKS Cluster Forensics

awsenum

Enumerate AWS cloud resources based on provided credential

awsgoat

AWSGoat : A Damn Vulnerable AWS Infrastructure

awsome-pentesting

My cheatsheet notes to pentest AWS infrastructure

azazel

Azazel is a userland rootkit based off of the original LD_PRELOAD technique from Jynx rootkit. It is more robust and has additional features, and focuses heavily around anti-debugging and anti-detection.

azredteamenumscript

Azure AD RedTeam Full Enumeration Script used to query all aspects of your target Azure tenant.

azsentinel

PowerShell module for Azure Sentinel

aztokenfinder

azucar

Security auditing tool for Azure environments

azure-activedirectory-library-for-python

ADAL for Python

azure-ad-incident-response-powershell-module

The Azure Active Directory Incident Response PowerShell module provides a number of tools, developed by the Azure Active Directory Product Group in conjunction with the Microsoft Detection and Response Team (DART), to assist in compromise response.

azure-functions-eop-poc

azure-red-team

Azure Security Resources and Notes

azure-sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

azure-sentinel-notebooks

Interactive Azure Sentinel Notebooks provides security insights and actions to investigate anomalies and hunt for malicious behaviors.

azure-sentinel2go

Azure Sentinel2Go is an open source project developed to expedite the deployment of an Azure Sentinel lab.

azuread

A collection of Azure AD related scripts and automations

azuread-attack-defense

This publication is a collection of various common attack scenarios on Azure Active Directory and how they can be mitigated or detected.

azureadexporter

PowerShell module to export a local copy of all Azure Active Directory configuration settings and objects.

azureadjoinedmachineptc

azureattackkit

Collection of Azure Tools to Pull down for Attacking an Environment + quick tips and other useful information

azurec2relay

AzureC2Relay is an Azure Function that validates and relays Cobalt Strike beacon traffic by verifying the incoming requests based on a Cobalt Strike Malleable C2 profile.

azureforensics

azurehunter

A Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365

azureoutlookc2

Azure Outlook Command & Control. Threat Emulation Tool for North Korean APT InkySquid / ScarCruft / APT37. TTP = Abuse Microsoft Graph API for C2 Operations.

azurert

AzureRT - A Powershell module implementing various Azure Red Team tactics

azuretokenextractor

Extracts Azure authentication tokens from PowerShell process minidumps. https://www.lares.com/blog/hunting-azure-admins-for-vertical-escalation-part-2/