mgstate Goto Github PK

ad-config-automation

Scripts and piece of codes used for Active Directory configuration

ad_enum_powerview

adokit

Azure DevOps Services Attack Toolkit

alfa

ALFA stands for Automated Audit Log Forensic Analysis for Google Workspace. You can use this tool to acquire all Google Workspace audit logs and to perform automated forensic analysis on the audit logs using statistics and the MITRE ATT&CK Cloud Framework

amsi_bypass

win10 and win11

amsi_bypass_go_shell

A small reverse shell for Linux & Windows

amsi_bypass_in_2023

Amsi Bypass payload that works on Windwos 11

amsi_patch_mdsec

miscellaneous scripts and programs

apcmanager

spoof

asysocks

Socks5 / Socks4 client and server library

autorecon

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

awesome-entra

😎 Awesome list of all things related to Microsoft Entra

awesome-redteam-cheatsheet

Red Team Cheatsheet in constant expansion.

azredteamenumscript

Azure AD RedTeam Full Enumeration Script used to query all aspects of your target Azure tenant.

bloodhound.py

A Python based ingestor for BloodHound

cloud_enum

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

cve-2024-1086

Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.

database

database_2

defcon_31_ad_good_bad_lolwut

defendercheck

Identifies the bytes that Microsoft Defender flags on.

demiguise

HTA encryption tool for RedTeams

detectionlab

Automate the creation of a lab environment complete with security tooling and logging best practices

docs

The open-source repo for docs.github.com

evil-winrm

The ultimate WinRM shell for hacking/pentesting

freeze

Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods

girsh

Automatically spawn a reverse shell fully interactive for Linux or Windows victim

graph

Initial Access and Post-Exploitation Tool for AAD and O365 with a browser-based GUI

hardhatc2

A c# Command & Control framework

hunting-queries-detection-rules

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.