This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can be mitigated or detected.
- azureactivedirectory
- itdr
- microsoftentraid
- microsoftsentinel
Repository Index
81,588 visible repositories in the index
145–168 of 448 · Most stars
A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk
- attack-range
- attack-simulation
- adversary
- simulation
Security sensor for realtime threat detection and protection
Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.
- brute-force-attacks
- bruteforce
- credential-testing
- cybersecurity
🔒 Swift Obfuscator that protects iOS apps against reverse engineering attacks.
- swift
- obfuscation
- ios
- objc
Powerful framework for rogue access point attack.
- wifipumpkin3
- accesspoint
- security
- mitm
Web app that provides basic navigation and annotation of ATT&CK matrices
- cti
- cyber-threat-intelligence
- mitre-attack
- mitre-corporation
$ ssh sshtron.zachlatta.com
Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.
- automation
- cybersecurity
- openapi
- shuffle
LUPINE is a GPU over IP bridge allowing GPUs on remote machines to be attached to CPU-only machines.
- cuda
- gpu
- remote-access
- networking
:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud
- aws
- adversary-emulation
- purple-team
- mitre-attack
Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.
- ai-agents
- ai-security
- bug-bounty
- claude-code
Graph Neural Networks with Keras and Tensorflow 2.
- graph-neural-networks
- keras
- python
- tensorflow
ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.
- payload
- xss
- blind
- php
Set of tools to analyze Windows sandboxes for exposed attack surface.
Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab
- active-directory
- powershell
- redteaming
- penetration-testing
A Firefox extension that demonstrates HTTP session hijacking attacks.
Automatically brute force all services running on a target.
- brute-force
- bruteforce
- bruteforcing
- bruteforce-attacks
Session attach/detach for the terminal
- ghostty
- tmux
- zig
- session-persistence
Use Claude Code's autonomous agent loop with DeepSeek V4 Pro, OpenRouter, or any Anthropic-compatible backend. Same UX, 17x cheaper.
This package contains deep learning models and related scripts for RoseTTAFold
Mail-Archiver is a web application for archiving, searching, and exporting emails from multiple accounts. Featuring folder sync, attachment support, mailbox migration and a dashboard.
- archive
- archiver
- docker-compose
- imap
Crack legacy zip encryption with Biham and Kocher's known plaintext attack.
- crack
- zip
- multithread
- attack
The FindMy Flipper app turns your FlipperZero into an AirTag or other tracking device, compatible with Apple AirTags and Samsung SmartTag and Tile Trackers. It uses the BLE beacon to broadcast, allowing users to clone existing tags, generate OpenHaystack key pairs for Apple's FindMy network, and customize beacon intervals and transmit power.