Stars
This repository is part of the Azure Mission-Critical open source project that provides a prescriptive architectural approach to building highly-reliable cloud-native applications on Microsoft Azur…
AzureGoat : A Damn Vulnerable Azure Infrastructure
PowerShell module to export a local copy of an Entra (Azure AD) tenant configuration.
Prowler Studio an AI workflow that ensures Claude Code follows Prowler's guardrails to deliver consistent, tested, and PR-ready threat detection checks, remediations and update compliance frameworks.
A toolkit to attack Office365
A collection of resources, tools and more for penetration testing and securing Microsofts cloud platform Azure.
A sample app for the Retrieval-Augmented Generation pattern running in Azure, using Azure AI Search for retrieval and Azure OpenAI large language models to power ChatGPT-style and Q&A experiences.
A powerful tool for automated LLM fuzzing. It is designed to help developers and security researchers identify and mitigate potential jailbreaks in their LLM APIs.
LibAFLGo: Evaluating and Advancing Directed Greybox Fuzzing
Baseline rules files to improve the security of AI-generated code (Claude, Cursor, Copilot + more)
MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It ca…
Maester is a test automation framework to help you stay in control of your Microsoft security configuration.
Incubating project for decoupling responsibilities from Dependency-Track's monolithic API server into separate, scalable services.
AI Red Teaming playground labs to run AI Red Teaming trainings including infrastructure.
A comprehensive security checklist for MCP-based AI tools. Built by SlowMist to safeguard LLM plugin ecosystems.
This repository contains the container image scanning tool ORCA
A PowerShell script that automates the security assessment of Microsoft 365 environments.
Midnight - Pathology foundation models trained on orders of magnitude fewer WSIs
Enumerate valid usernames from Office 365 using ActiveSync, Autodiscover v1, or office.com login page.
Monkey365 is an open-source security assessment tool for Microsoft 365, Azure, and Microsoft Entra ID. It helps security professionals identify misconfigurations, review cloud security posture, and…
PowerShell framework to assess Azure security
Learn to build your Second Brain AI assistant with LLMs, agents, RAG, fine-tuning, LLMOps and AI systems techniques.
CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 150+ global frameworks with automatic control mapping,…
Toolkit for large-scale whole-slide image processing.
Standardized benchmark for computational pathology foundation models.
A deliberately vulnerable banking application designed for practicing Security Testing of Web App, APIs, AI integrated App and secure code reviews. Features common vulnerabilities found in real-wor…