mgstate Goto Github PK

ad-config-automation

Scripts and piece of codes used for Active Directory configuration

ad_enum_powerview

amsi_bypass

win10 and win11

amsi_bypass_go_shell

A small reverse shell for Linux & Windows

amsi_bypass_in_2023

Amsi Bypass payload that works on Windwos 11

amsi_patch_mdsec

miscellaneous scripts and programs

apcmanager

spoof

asysocks

Socks5 / Socks4 client and server library

autorecon

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

awesome-entra

😎 Awesome list of all things related to Microsoft Entra

awesome-redteam-cheatsheet

Red Team Cheatsheet in constant expansion.

azredteamenumscript

Azure AD RedTeam Full Enumeration Script used to query all aspects of your target Azure tenant.

bloodhound.py

A Python based ingestor for BloodHound

cve-2024-1086

Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.

database

database_2

defcon_31_ad_good_bad_lolwut

defendercheck

Identifies the bytes that Microsoft Defender flags on.

demiguise

HTA encryption tool for RedTeams

detectionlab

Automate the creation of a lab environment complete with security tooling and logging best practices

docs

The open-source repo for docs.github.com

evil-winrm

The ultimate WinRM shell for hacking/pentesting

girsh

Automatically spawn a reverse shell fully interactive for Linux or Windows victim

hardhatc2

A c# Command & Control framework

hunting-queries-detection-rules

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

icmpv2

ligolo-ng

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

mgstate

Config files for my GitHub profile.

microsoft-extractor-suite

A PowerShell module for acquisition of data from Microsoft 365 and Azure for Incident Response and Cyber Security purposes.

msinvader

M365/Azure adversary simulation tool designed to simulate adversary techniques and generate attack telemetry.