SharpSCCM
mayyhem/sharpsccmC# post-exploitation tool for abusing Microsoft Configuration Manager (SCCM) to perform lateral movement, credential gathering, and NTLM…
authenticationlateral-movementnetwork-security+3
704
mayyhem/sharpsccmC# post-exploitation tool for abusing Microsoft Configuration Manager (SCCM) to perform lateral movement, credential gathering, and NTLM…
0xisfet/cve-2025-53770-scanner🎯 Vulnerability scanner for SharePoint servers affected by CVE-2025-53770. Detects unsafe deserialization using ToolPane.aspx with a crafted…
nccgroup/metadataplusA tool to use novel locations to extract metadata from Office documents.
dfir-orc/dfir-orcForensics artefact collection tool for systems running Microsoft Windows
funkandwagnalls/rangerA tool for security professionals to access and interact with remote Microsoft Windows based systems.
dwisiswant0/proxylogscanA fast tool to mass scan for a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as…
microsoft/etl2pcapngUtility that converts an .etl file containing a Windows network packet capture into .pcapng format.
p0dalirius/rdwatoolA python script to extract information from a Microsoft Remote Desktop Web Access (RDWA) application
quickbreach/exchangerelayxAn NTLM relay tool to the EWS endpoint for on-premise exchange servers. Provides an OWA for hackers.
ceramicskate0/sharpexchangeC# Tool to interact with MS Exchange based on MS docs
neelkotnis/azure-security-auditorCLI tool to audit Azure security posture, RBAC, NSGs, storage, identity, and encryption
0xsha/cloudbruteUncover a target's cloud infrastructure, files, and apps across major providers (AWS, Azure, GCP) using unauthenticated enumeration with concurrent…
invictus-ir/microsoft-extractor-suiteA PowerShell module for acquisition of data from Microsoft 365 and Azure for Incident Response and Cyber Security purposes.
dafthack/mfasweepA tool for checking if MFA is enabled on multiple Microsoft Services
garrettfoster13/sccmhunterPost-exploitation tool for identifying, profiling, and attacking Microsoft SCCM assets within Active Directory domains, streamlining credential…
bishopfox/exchange-scannerIdentify public-facing Microsoft Exchange servers and determine their software versions
mhaskar/exchangefinderFind Microsoft Exchange instance for a given domain and identify the exact version
arvanaghi/sessiongopherSessionGopher is a PowerShell tool that uses WMI to extract saved session information for remote access tools such as WinSCP, PuTTY, SuperPuTTY,…