A comprehensive list of usable Entra ID first-party clients with pre-consented Microsoft Graph scopes, in a simple YAML-file explorable with a simple HTML GUI.

Bitpixie exploitation PoC

🌱 a fast, batteries-included static-site generator that transforms Markdown content into fully functional websites

bitpixie Proof of Concept - Bitlocker Decryptor

Tool for Active Directory Certificate Services enumeration and abuse

Memory-Dump-UEFI is a UEFI application for dumping the contents of RAM.

Windows Privilege Escalation from User to Domain Admin.

Pipeleak is a tool designed to scan GitLab job output logs and artifacts for secrets.

oauth-labs: an intentionally vulnerable set of OAuth 2.0 labs for security training and learning

A pure PowerShell solution for Entra OAuth authentication, enabling easy retrieval of access and refresh tokens

SpecterOps Presentations

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

A BOF that runs unmanaged PEs inline

a Docker + Kubernetes network trouble-shooting swiss-army container

possibly useful tools for the Internet (including dnscheck.tools and myaddr.tools)

Interact with Chromium-based browsers' debug port to view open tabs, installed extensions, and cookies

Parses Snaffler output file and generate beautified outputs.

Remote Kerberos Relay made easy! Advanced Kerberos Relay Framework

DES Rainbow Table Online Phase

RunasCs - Csharp and open version of windows builtin runas.exe

BloodyAD is an Active Directory Privilege Escalation Framework

Misconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive and hardening guidance.

P4wnP1 A.L.O.A. by MaMe82 is a framework which turns a Rapsberry Pi Zero W into a flexible, low-cost platform for pentesting, red teaming and physical engagements ... or into "A Little Offensive Ap…

apk.sh makes reverse engineering Android apps easier, automating some repetitive tasks like pulling, decoding, rebuilding and patching an APK.

Analyze HTTP and DNS requests and create custom DNS records for your subdomain

Privacy and security baseline for personal Windows 10 and Windows 11

An Arduino sketch for the Adafruit SCD4X and SCD-30 CO2 sensor running on an ESP32 with an http server.

Windows Application Attack Surface Analyzer