ConditionalAccessIQ streamlines this process by providing automatic version control, change tracking, and visual comparisons of your Conditional Access Policies.

A tiny tool built to help AD Admins tame the Protected Users group.

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

Offical FUTO Keyboard Issue Tracker and Source Mirror of https://gitlab.futo.org/keyboard/latinime

This tool/script retrieves tokens for all devices connected to Xiaomi cloud and encryption keys for BLE devices.

Roo Code (prev. Roo Cline) gives you a whole dev team of AI agents in your code editor.

A security assessment tool for analyzing Active Directory Group Policy Objects (GPOs) to identify misconfigurations and vulnerabilities

A fork of the great TokenTactics with support for CAE and token endpoint v2

Exchange your privileges for Domain Admin privs by abusing Exchange

A feature-rich command-line audio/video downloader

A cross platform front-end GUI of the popular youtube-dl written in wxPython.

TokenSmith generates Entra ID access & refresh tokens on offensive engagements. It is suitable for both covert adversary simulations and penetration tests with the tokens generated working out of t…

Simple pure PowerShell POC to bypass Entra / Intune Compliance Conditional Access Policy

Self-hosted audiobook and podcast server

💾 Patches to add save state support to Game Boy games when playing on the original hardware

Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language).

Table of AD and Azure assets and whether they belong to Tier Zero

PowerShell module to import/export Excel spreadsheets, without Excel

Report of M365 3rd party EWS applications using accounts that have the ApplicationImpersonation RBAC role assigned

A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.

This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone is created, it utilizes MINIDUMP_CALLBACK_INFORMATION callb…

game of active directory

Attack Graph Visualizer and Explorer (Active Directory) ...Who's *really* Domain Admin?

Automatic Microsoft 365 Documentation to simplify the life of admins and consultants.

NukeAMSI is a powerful tool designed to neutralize the Antimalware Scan Interface (AMSI) in Windows environments.

Azure Managed Identity Permissions Tool, a new PowerShell tool that simplifies and streamlines the management of Managed Identity permissions in Azure (Entra ID)

This script enables IT administrators to analyze and audit Intune assignments. It checks assignments for specific users, groups, or devices, displays all policies and their assignments, identifies …

ADXFlowmaster helps SecOps teams Threat Hunt suspicious network traffic inside & outside of Azure.

Nuke It From Orbit - remove AV/EDR with physical access