game of active directory

A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security audits purposes.

This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can be mitigated or detected.

Azure Security Resources and Notes

A tool for checking if MFA is enabled on multiple Microsoft Services

Powershell tool to automate Active Directory enumeration.

A list of useful Powershell scripts with 100% AV bypass (At the time of publication).

The Shadow Attack Framework

Egress-Assess is a tool used to test egress data detection capabilities

Create fake certs for binaries using windows binaries and the power of bat files

Load any Beacon Object File using Powershell!

RACE is a PowerShell module for executing ACL attacks against Windows targets.

AzureRT - A Powershell module implementing various Azure Red Team tactics

Microsoft Signed PowerShell scripts

Various Aggressor Scripts I've Created.

C# havoc implant

A very simple lab to demo some Terraform, DSC, Inspec and Gitlab CI

Tools I use on red team engagements and more

generates a shellcode loading powershell script that is xor encrypted

AADInternals PowerShell module for administering Azure AD and Office 365