PowerSploit - A PowerShell Post-Exploitation Framework

Six Degrees of Domain Admin

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

A Collection of Scripts Which Disable / Remove Windows 10 Features and Apps

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

Custom bash scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Kali Linux.

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It ca…

PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world.…

Place to store our documentation, code samples, etc for public consumption.

Welcome to the Microsoft Defender for Cloud community repository

The Azure Landing Zones (Enterprise-Scale) architecture provides prescriptive guidance coupled with Azure best practices, and it follows design principles across the critical design areas for organ…

PowerShell Pass The Hash Utils

Gets plaintext Active Directory credentials if you're on the internal network but outside the AD environment

Active Directory Assessment and Privilege Escalation Script

PowerShell framework to assess Azure security

My collection of battle-tested Aggressor Scripts for Cobalt Strike 4.0+

Code samples and extended documentation to support the guidance provided in the Microsoft Cloud Adoption Framework

PowerShell Remote Download Cradle Generator & Obfuscator

Azure Governance Visualizer aka AzGovViz is a PowerShell script that captures Azure Governance related information such as Azure Policy, RBAC (a lot more) by polling Azure ARM, Storage and Microsof…

Random Tools

A script for advanced discovery of Privileged Accounts - includes Shadow Admins

A PowerShell script for helping to find vulnerable settings in AD Group Policy. (deprecated, use Grouper2 instead!)

A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.

retrieve information via O365 and AzureAD with a valid cred

GoFetch is a tool to automatically exercise an attack plan generated by the BloodHound application.

Various Vagrant envs with Windows 2019/10 and Docker, Swarm mode, LCOW, WSL2, ...

Aggressor scripts I've made for Cobalt Strike

Create a high level interactive HTML report for you Active Directory environment using PowerShell