Privilege Escalation Enumeration Script for Windows

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAR…

A tool for checking if MFA is enabled on multiple Microsoft Services

AADInternals PowerShell module for administering Azure AD and Office 365

Windows Local Privilege Escalation Cookbook

Misconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive and hardening guidance.

A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, i…

SpoolSample -> Responder w/NetNTLM Downgrade -> NetNTLMv1 -> NTLM -> Kerberos Silver Ticket

PowerShell toolkit for AD CS auditing based on the PSPKI toolkit.

Tooling for assessing an Azure AD tenant state and configuration

BloodHound Attack Research Kit

PowerShell scripts for alternative SharpHound enumeration, including users, groups, computers, and certificates, using the ActiveDirectory module (ADWS) or System.DirectoryServices class (LDAP).

A PowerShell script to perform PKINIT authentication with the Windows API from a non domain-joined machine.

BloodHound OpenGraph Entra ID Authentication Policy Data Collector