Discover optiv/Microsoft365_devicePhish Open Source project

Stars
92
Rank 362,966 (Top 8 %)
Language
Python
License
MIT License
Created over 3 years ago
Updated about 3 years ago

optiv

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

A proof-of-concept script to conduct a phishing attack abusing Microsoft 365 OAuth Authorization Flow

ScareCrow

ScareCrow - Payload creation framework designed around EDR bypass.

2,730

Freeze

Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods

1,405

Mangle

Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs

1,163

Ivy

Ivy is a payload creation framework for the execution of arbitrary VBA (macro) source code directly in memory. Ivy’s loader does this by utilizing programmatical access in the VBA object environment to load, decrypt and execute shellcode.

738

Freeze.rs

Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST

Rust

708

Go365

An Office365 User Attack Tool

621

Talon

A password guessing tool that targets the Kerberos and LDAP services within the Windows Active Directory environment.

431

mobile-nuclei-templates

390

Registry-Recon

Cobalt Strike Aggressor Script that Performs System/AV/EDR Recon

321

Dent

A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors.

296

InsecureShop

An Intentionally designed Vulnerable Android Application built in Kotlin.

Kotlin

231

OSINT_Encyclopedia

Your go-to resource for all things OSINT

155

blemon

Universal BLE Monitoring with Frida (or Objection)

JavaScript

rest-api-goat

Python

KnockKnock

Enumerate valid users within Microsoft Teams and OneDrive with clean output.

Python

rustyIron

rustyIron is a tool that takes advantage of functionality within Ivanti's MobileIron MDM solution to perform single-factor authentication attacks. rustyIron can locate the MobileIron MDM authentication endpoint, validate the authentication strategy of the environment, perform user enumeration, brute-force registration PIN values, and perform single-factor authentication attacks.

airCross

airCross is a tool that takes advantage of API functionality within VMWare's AirWatch MDM solution to perform single-factor authentication attacks. airCross can locate AirWatch authentication endpoint, validate the authentication strategy of the environment, collect GroupID authentication values, conduct single-factor authentication, and perform user enumeration, in some instances.

CVE-2020-15931

Netwrix Account Lockout Examiner 4.1 Domain Admin Account Credential Disclosure Vulnerability

nvdsearch

A National Vulnerability Database (NVD) API query tool

doppelganger

Doppelgänger is firmware that runs on ESP32 devices that can be embedded within commercially available RFID readers with the intent of capturing access control card data while performing physical security assessments. Doppelgänger keeps the operator's ease of access, maintenance, and operational communications in mind.

C++

DATP_Queries

Microsoft Defender ATP Advanced Hunting Queries

Yara-Rules

YARA

netneedle

Network based steganography based control channels and chat.

showSSID

Python

Luhn-Calculator

A very simple Burp extension to make it easier to enumerate credit cards in the Intruder.

Python

burp-reset-a-tron

reset-a-tron Burp extension

Python

android-ndk-crackme

A simple NDK-based application on which to demonstrate some important attack strategies.

Java

burp-IBM-WebSphere-Portlet-Decoder

BurpSuite plugin for decoding IBM WebSphere Portlet States

Python

burp-java-deserializer

Java

warmap-go

CSS

VisualLockPickingWorkstation

The Visual Lock Picking Workstation is a Raspberry Pi enclosure which makes it possible to capture live video from a cutaway lock. It is intended as an instructional device which can be used to display the inner workings of a lock while teaching lock picking.

burpshellshock

Shellshock scanner for Apache MOD_CGI

Java

azure_runbooks

talus_client

Python

pyautoaws

Simple Python wrapper for Terraform/Ansible to build AWS resources

HCL

checkpassword-.net

HIBP Pwned Passwords API Client for .NET apps

talus

Python

Lightning-Action-Editor

Java

azure-api-management-tracing-helper

Java

captcha-solve

Python

checkpassword-java

HIBP Pwned Passwords API client for Java projects

Java

terraform-eks

Terraform/Amazon EKS Deployment Starter Scripts

HCL

optiv/Microsoft365_devicePhish

optiv

Reviews

Repository Details

More Repositories