A list of public penetration test reports published by several consulting firms and academic security groups.

Weaponized Browser-in-the-Middle (BitM) for Penetration Testers

A malicious OAuth application that can be leveraged for both internal and external phishing attacks targeting Microsoft Azure and Office365 users.