Repository Index

ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed nodes

• bugbounty
• bugbounty-tool
• crawler
• dirscanner

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

• active-directory
• powershell
• redteaming
• penetration-testing

Frida scripts to rewrite mobile applications at runtime to directly MitM all HTTPS traffic

• android
• frida
• certificate
• interception

Streamline your web application's authentication with Polis, an SSO service supporting SAML and OpenID Connect protocols. Beyond enterprise-grade Single Sign-On, it also supports Directory Sync via the SCIM 2.0 protocol for automatic user and group provisioning/de-provisioning.

• enterprise-software
• saml
• saml2
• saml-service-provider

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

• penetration-testing
• pentesting
• active-directory
• hacking

Attack Graph Visualizer and Explorer (Active Directory) ...Who's *really* Domain Admin?

• blueteam
• active-directory
• activedirectory
• acl

FakeNet-NG - Next Generation Dynamic Network Analysis Tool

• fakenet-ng
• traffic-redirection
• malware-analysis
• mandiant-flare

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

• oscp
• penetration-testing
• scanner
• security

pwning IPv4 via IPv6

Bloodhound Reporting for Blue and Purple Teams

• active
• directory
• blueteam
• purpleteam

Ephemeral root via the CVE-2026-43284 page-cache exploit

• android
• android-root
• android-security
• cve-2026-43284

Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.

• digital-security
• forensics
• incident-response
• ioc

ARES - authorized red-team engagement automation with dashboard, campaign scope, module orchestration, OPSEC controls, encrypted vault, and reporting.

• active-directory
• cloud-security
• defensive-validation
• fastapi

Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.

OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications

• openam
• sso
• oauth
• saml

Typed TypeScript SDK for direct and managed social platform integrations, with capability checks, explicit outcomes, and deterministic testing.

• api-integration
• bluesky
• bun
• developer-tools

A concise, directive, specific, flexible, and free incident response plan template

• incident-response
• incident
• incident-management
• infosec

Local-first password manager with direct device-to-device sync

• password-manager
• totp-authenticator
• security
• security-tools

A tool for deploying and detecting use of Active Directory honeytokens

OpenDJ is an open-source LDAP directory server written in Java. It provides robust, scalable, and secure directory services for identity management, access control, and authentication in enterprise environments. OpenDJ supports LDAPv3 standard, replication, REST APIs, and high-performance

• ldap-server
• ldap
• opendj
• rest

$MFT directory tree reconstruction & FILE record info

• mft-browser
• mft
• powershell
• winform

The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups

• active-directory
• cheatsheet
• ctf
• cybersecurity

A post exploitation framework for advanced Red Team operations

• active-directory
• adversary-simulation
• c2
• c2-framework

:elephant: :busts_in_silhouette: Manage PostgreSQL roles and privileges from YAML or LDAP

• ldap
• postgresql
• yaml
• roles