A collection of resources, tools and more for penetration testing and securing Microsofts cloud platform Azure.

Lifetime AMSI bypass

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

BadUSB cable based on Attiny85 microcontroller with data line enabled.

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

Impacket is a collection of Python classes for working with network protocols.

A Modern Orchestration Engine for Security

GTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems.