365-Stealer is a phishing simualtion tool written in python3. It can be used to execute Illicit Consent Grant Attack.

Sample code for the Flask tutorial in the VS Code documentation

Sample Java application referred to by Azure Pipelines documentation

Cover various security approaches to attack techniques and also provides new discoveries about security breaches.

A PowerShell script that automates the security assessment of Microsoft Office 365 environments.

An Azure Security Assessment Tool Written with 200+ Rules

MAAD Attack Framework - An attack tool for simple, fast & effective security testing of M365 & Azure AD.

AADInternals PowerShell module for administering Azure AD and Office 365

A curated list of awesome Kubernetes security resources

Azure Security Resources and Notes

This publication is a collection of various common attack scenarios on Azure Active Directory and how they can be mitigated or detected.

Threat matrix for CI/CD Pipeline