nyxgeek

onedrive_user_enum. onedrive user enumeration - pentest tool to enumerate valid o365 users

o365recon. retrieve information via O365 and AzureAD with a valid cred

ntlmscan. scan for NTLM directories

lyncsmash. locate and attack Lync/Skype for Business

username-lists. list of usernames and email addresses for pentests

AzureAD_Autologon_Brute. Brute force attack tool for Azure AD Autologon/Seamless SSO - Source: https://arstechnica.com/information-technology/2021/09/new-azure-active-directory-password-brute-forcing-flaw-has-no-fix/

guestlist. tool for identifying guest relationships between companies

nyxgeek-rules. Custom password cracking rules for Hashcat and John the Ripper

track_the_planet. DEFCON 31 slide deck and video link

dumpsniffer. tools for analyzing strings from password lists

teamstracker. using graph proxy to monitor teams user presence

imgdevil. quick and dirty proof-of-concept to hide shells in images

dirdevil. hiding in plain sight: part 2

weakpass_generator. generates weak passwords based on current date

cloudkicker. self-hosted Azure OSINT tool

autodiscover_enum. time-based user enum via Basic Auth in Azure against Autodiscover

frontdoor_waf_wtf. Script to check Azure Front Door WAF for insecure RemoteAddr variable

nyxgeek-wordlists. wordlists for password cracking

azure_survey_2025. results of scraping OneDrive from February 2022 - March 2025

twitter-usernames-wordlist. Wordlist compiled from Twitter usernames

trontastic_usernames. top usernames from azure survey 2025

bad_guest. PowerShell

nyxgeek-readinglist. hacker folklore, history, and culture

rpcfiend. Use rpc null sessions to retrieve machine list, domain admin list, domain controllers

simple_scanners. simple pentest scanning scripts with no db

enum4linux. enum4Linux is a Linux alternative to enum.exe for enumerating data from Windows and Samba hosts.

Evil_OAuth2_App. Creating an Evil OAuth2 application with PHP

f5-cookie-monster. give it a url, will decode f5 cookies to reveal internal IPs

classic_hacking_tools. archive of classic hack tools < 2000

TeamsEnum. User Enumeration of Microsoft Teams users via API

graphninja. Python

phrack69. mirror of phrack issue 69

h4x0rsearch. list of domains that are included in h4x0rsearch.com

vulnmgmt. Be alerted ONLY on new vulnerabilities discovered in software you use

SecretServerSecretStealer. Powershell script that decrypts the data stored within a Thycotic Secret Server

nyxgeek-slides. slide decks etc

icu. ICU for Microsoft Teams - to be released February 14, 2025

exploits. my public exploit code

shmoocon. Azure Survey 2025: 60 Million Users and Counting. my slide deck from shmoocon #20

domain. forked from jhaddix/domain enum script, changed for Mac OS X

open_source_hardware. a list of open source hardware projects that interest me

bashscan. simple bash portscanner using nc

media. images, gifs, movies i've modded or made

jtr-to-hashcat. Converts NETNTLM hashes in JtR format and converts them into the format hashcat uses.

hashcat. World's fastest and most advanced password recovery utility

LDAPPER. LDAP Querying without the Suck

gcp_tools. scripts for testing GCP

retrocomputing_resources. collection of old computing stuff

AADInternals. AADInternals PowerShell module for administering Azure AD and Office 365

PowerShell. NetSPI PowerShell Scripts

blogs. links to my blogs

medusa. Medusa is a speedy, parallel, and modular, login brute-forcer.

CMSmap. Python

open_source_farming. HTML

GraphRunner. A Post-exploitation Toolset for Interacting with the Microsoft Graph API