├── .gitignore ├── README.md ├── documentation ├── AppRegistrationPermissions.csv ├── README.md └── passwordResetRoles.json ├── media ├── README.md ├── securehats-200x.png ├── securehats-banner-small.png ├── securehats-banner.png ├── securehats-layers-200x.png ├── securehats-master.png └── sh-banners.png ├── policies └── governance │ ├── RoleAssignments │ ├── azuredeploy.bicep │ ├── azuredeploy.json │ ├── azurepolicy.json │ ├── azurepolicy.parameters.json │ ├── azurepolicy.rules.json │ └── readme.md │ └── guestusers │ └── azuredeploy.json └── scripts ├── Azure ├── Hijacky.ps1 ├── RBAC │ └── remove-disabledUsers.ps1 ├── README.md └── Sentinel │ ├── Enable-AlertRules │ ├── Enable-AlertRules.ps1 │ ├── dataconnectors.csv │ └── readme.md │ ├── New-MsSentinelWatchlist │ ├── New-MsSentinelWatchlist.ps1 │ ├── example.csv │ └── readme.md │ ├── Update-DetectionRules │ └── Update-DetectionRules.ps1 │ └── update-detectionRules.ps1 ├── AzureAD ├── Attack │ ├── Invoke-RatSpray.ps1 │ ├── az-adPoison.ps1 │ └── constants.json ├── Get-TenantInfo.ps1 ├── README.md ├── Set-AadDiagnostics.ps1 ├── Set-AzureAdRoleAssigment.ps1 ├── azGraphFish.ps1 └── invoke-sprayer.ps1 ├── Network ├── invoke-ratscan.ps1 └── readme.md └── README.md /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/.gitignore -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/README.md -------------------------------------------------------------------------------- /documentation/AppRegistrationPermissions.csv: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/documentation/AppRegistrationPermissions.csv -------------------------------------------------------------------------------- /documentation/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/documentation/README.md -------------------------------------------------------------------------------- /documentation/passwordResetRoles.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/documentation/passwordResetRoles.json -------------------------------------------------------------------------------- /media/README.md: -------------------------------------------------------------------------------- 1 | Images and media folder 2 | -------------------------------------------------------------------------------- /media/securehats-200x.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/media/securehats-200x.png -------------------------------------------------------------------------------- /media/securehats-banner-small.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/media/securehats-banner-small.png -------------------------------------------------------------------------------- /media/securehats-banner.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/media/securehats-banner.png -------------------------------------------------------------------------------- /media/securehats-layers-200x.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/media/securehats-layers-200x.png -------------------------------------------------------------------------------- /media/securehats-master.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/media/securehats-master.png -------------------------------------------------------------------------------- /media/sh-banners.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/media/sh-banners.png -------------------------------------------------------------------------------- /policies/governance/RoleAssignments/azuredeploy.bicep: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/policies/governance/RoleAssignments/azuredeploy.bicep -------------------------------------------------------------------------------- /policies/governance/RoleAssignments/azuredeploy.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/policies/governance/RoleAssignments/azuredeploy.json -------------------------------------------------------------------------------- /policies/governance/RoleAssignments/azurepolicy.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/policies/governance/RoleAssignments/azurepolicy.json -------------------------------------------------------------------------------- /policies/governance/RoleAssignments/azurepolicy.parameters.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/policies/governance/RoleAssignments/azurepolicy.parameters.json -------------------------------------------------------------------------------- /policies/governance/RoleAssignments/azurepolicy.rules.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/policies/governance/RoleAssignments/azurepolicy.rules.json -------------------------------------------------------------------------------- /policies/governance/RoleAssignments/readme.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/policies/governance/RoleAssignments/readme.md -------------------------------------------------------------------------------- /policies/governance/guestusers/azuredeploy.json: -------------------------------------------------------------------------------- 1 | 2 | -------------------------------------------------------------------------------- /scripts/Azure/Hijacky.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/scripts/Azure/Hijacky.ps1 -------------------------------------------------------------------------------- /scripts/Azure/RBAC/remove-disabledUsers.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/scripts/Azure/RBAC/remove-disabledUsers.ps1 -------------------------------------------------------------------------------- /scripts/Azure/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/scripts/Azure/README.md -------------------------------------------------------------------------------- /scripts/Azure/Sentinel/Enable-AlertRules/Enable-AlertRules.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/scripts/Azure/Sentinel/Enable-AlertRules/Enable-AlertRules.ps1 -------------------------------------------------------------------------------- /scripts/Azure/Sentinel/Enable-AlertRules/dataconnectors.csv: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/scripts/Azure/Sentinel/Enable-AlertRules/dataconnectors.csv -------------------------------------------------------------------------------- /scripts/Azure/Sentinel/Enable-AlertRules/readme.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/scripts/Azure/Sentinel/Enable-AlertRules/readme.md -------------------------------------------------------------------------------- /scripts/Azure/Sentinel/New-MsSentinelWatchlist/New-MsSentinelWatchlist.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/scripts/Azure/Sentinel/New-MsSentinelWatchlist/New-MsSentinelWatchlist.ps1 -------------------------------------------------------------------------------- /scripts/Azure/Sentinel/New-MsSentinelWatchlist/example.csv: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/scripts/Azure/Sentinel/New-MsSentinelWatchlist/example.csv -------------------------------------------------------------------------------- /scripts/Azure/Sentinel/New-MsSentinelWatchlist/readme.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/scripts/Azure/Sentinel/New-MsSentinelWatchlist/readme.md -------------------------------------------------------------------------------- /scripts/Azure/Sentinel/Update-DetectionRules/Update-DetectionRules.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/scripts/Azure/Sentinel/Update-DetectionRules/Update-DetectionRules.ps1 -------------------------------------------------------------------------------- /scripts/Azure/Sentinel/update-detectionRules.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/scripts/Azure/Sentinel/update-detectionRules.ps1 -------------------------------------------------------------------------------- /scripts/AzureAD/Attack/Invoke-RatSpray.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/scripts/AzureAD/Attack/Invoke-RatSpray.ps1 -------------------------------------------------------------------------------- /scripts/AzureAD/Attack/az-adPoison.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/scripts/AzureAD/Attack/az-adPoison.ps1 -------------------------------------------------------------------------------- /scripts/AzureAD/Attack/constants.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/scripts/AzureAD/Attack/constants.json -------------------------------------------------------------------------------- /scripts/AzureAD/Get-TenantInfo.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/scripts/AzureAD/Get-TenantInfo.ps1 -------------------------------------------------------------------------------- /scripts/AzureAD/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/scripts/AzureAD/README.md -------------------------------------------------------------------------------- /scripts/AzureAD/Set-AadDiagnostics.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/scripts/AzureAD/Set-AadDiagnostics.ps1 -------------------------------------------------------------------------------- /scripts/AzureAD/Set-AzureAdRoleAssigment.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/scripts/AzureAD/Set-AzureAdRoleAssigment.ps1 -------------------------------------------------------------------------------- /scripts/AzureAD/azGraphFish.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/scripts/AzureAD/azGraphFish.ps1 -------------------------------------------------------------------------------- /scripts/AzureAD/invoke-sprayer.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/scripts/AzureAD/invoke-sprayer.ps1 -------------------------------------------------------------------------------- /scripts/Network/invoke-ratscan.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/scripts/Network/invoke-ratscan.ps1 -------------------------------------------------------------------------------- /scripts/Network/readme.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/scripts/Network/readme.md -------------------------------------------------------------------------------- /scripts/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/SecureHats/SecureHacks/HEAD/scripts/README.md --------------------------------------------------------------------------------