Ellis Springe

CredMaster. Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling

Max. Maximizing BloodHound. Max is a good boy.

o365fedenum. Federated Office365 user enumeration based on correlated response trend analysis

EyeWitnessTheFitness. Exactly what it sounds like, which is something rad

BloodHound-Custom-Queries. Assorted BloodHound Cypher queries/tricks I haven't seen in other cheat sheets

Reverse-DNS-Info. Python

bloodhound-scripts. Bloodhound helper scripts

DPS. Distributed Port Scanner (Damage-Per-Second)

Conference-Talks. Compilation of Conference talks and details

spoof-phisher. DNS spoofing with ARP poisoning. End goal: using DNS and ARP spoofing, automatically clone a website, harvest credentials, then redirect to the legitimate website making the phish undetectable

FireHaus. Collection of tools refactored to add FireProx support to bypass rate-limiting

knavesec. $> whoami

anomaly_lab. Anomaly repo for KUISC Lab session (CTF)

red-team-infrastructure-example. A basic Terraform configuration for provisioning simple red team infrastructure in DigitalOcean

confused. Tool to check for dependency confusion vulnerabilities in multiple package management systems

check_mdi. Python script to enumerate valid Microsoft 365 domains, retrieve tenant name, and check for an MDI instance.

nuclei. Fast and customizable vulnerability scanner based on simple YAML based DSL.

awesome-bloodhound. A curated list of awesome BloodhoundAD resources