game of active directory

A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security audits purposes.

This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can be mitigated or detected.

Azure Security Resources and Notes

A tool for checking if MFA is enabled on multiple Microsoft Services

The Shadow Attack Framework

A list of useful Powershell scripts with 100% AV bypass (At the time of publication).

Powershell tool to automate Active Directory enumeration.

Egress-Assess is a tool used to test egress data detection capabilities

Create fake certs for binaries using windows binaries and the power of bat files

Load any Beacon Object File using Powershell!

AzureRT - A Powershell module implementing various Azure Red Team tactics

Microsoft Signed PowerShell scripts

RACE is a PowerShell module for executing ACL attacks against Windows targets.

Various Aggressor Scripts I've Created.

C# havoc implant

A very simple lab to demo some Terraform, DSC, Inspec and Gitlab CI

Tools I use on red team engagements and more

generates a shellcode loading powershell script that is xor encrypted