├── .DS_Store ├── .devcontainer ├── .devcontainter │ └── welcome ├── Dockerfile ├── devcontainer.json └── update.sh ├── .github ├── DISCUSSION_TEMPLATE │ └── README.md ├── ISSUE_TEMPLATE │ ├── bug_report.md │ └── feauture_request.md ├── discussions │ └── live-event-reconnaissance-demo.yml ├── media │ ├── README.md │ ├── azure-hacking-corp.jpg │ ├── banner.png │ ├── cateye.png │ └── loaded.png └── workflows │ ├── Abuse-FederatedCredentials.yml │ ├── Sami_app.yml │ ├── add-comments.yml │ ├── fetch-token.yml │ ├── mc2mc-add-member.yml │ ├── mc2mc-clone-user.yml │ ├── pullrequest │ ├── pester.yml │ └── release.yml │ ├── release.yml │ ├── uami.yaml │ ├── validate-changelog-update.yaml │ └── validate-version-update.yaml ├── .gitignore ├── BlackCat.psd1 ├── BlackCat.psm1 ├── CHANGELOG.md ├── CODE_OF_CONDUCT.md ├── CONTRIBUTING.md ├── IMPROVEMENTS.md ├── LICENSE.md ├── Private ├── ConvertFrom-AzAccessToken.ps1 ├── Format-BlackCatOutput.ps1 ├── Get-AccessToken.ps1 ├── Get-AllPages.ps1 ├── Get-CidrAddresses.ps1 ├── Invoke-BlackCat.ps1 ├── Invoke-SplitJWT.ps1 ├── Reference │ ├── AzureRoles.csv │ ├── EntraRoles.csv │ ├── ServiceTags.json │ ├── appRoleIds.csv │ ├── privileged-roles.json │ ├── subdomains.json │ └── userAgents.json ├── Use-BlackCatCache.ps1 ├── Write-BlackCatLog.ps1 └── Write-Message.ps1 ├── Public ├── .DS_Store ├── Credential Access │ ├── Get-AzResourceSecretList.ps1 │ ├── Get-KeyVaultSecret.ps1 │ └── Get-StorageAccountKey.ps1 ├── Discovery │ ├── Find-AzurePermissionHolder.ps1 │ ├── Find-EntraPermissionHolder.ps1 │ ├── Get-AppRolePermission.ps1 │ ├── Get-FederatedAppCredential.ps1 │ ├── Get-PrivilegedApp.ps1 │ ├── Get-PrivilegedServicePrincipal.ps1 │ ├── Get-ResourcePermission.ps1 │ ├── Get-RoleAssignment.ps1 │ ├── Get-ServicePrincipalCredential.ps1 │ └── Get-ServicePrincipalsPermission.ps1 ├── Exfiltration │ ├── Export-AzAccessToken.ps1 │ └── anonymous │ │ └── Get-PublicBlobContent.ps1 ├── Helpers │ ├── Clear-BlackCatCache.ps1 │ ├── ConvertFrom-JWT.ps1 │ ├── Find-AzureServiceTag.ps1 │ ├── Get-BlackCatCacheMemoryStats.ps1 │ ├── Get-BlackCatCacheStats.ps1 │ ├── Get-CurrentUserAgent.ps1 │ ├── Get-UserAgentStatus.ps1 │ ├── Invoke-StealthOperation.ps1 │ ├── Invoke-Update.ps1 │ ├── New-AuthHeader.ps1 │ ├── New-JWT.ps1 │ ├── Optimize-BlackCatCacheMemory.ps1 │ ├── Read-SASToken.ps1 │ ├── Select-AzureContext.ps1 │ ├── Set-UserAgentRotation.ps1 │ ├── Show-BlackCatCommands.ps1 │ ├── Update-AzureServiceTag.ps1 │ └── Write-CacheTypeStats.ps1 ├── Impair Defenses │ └── Set-AzNetworkSecurityGroupRule.ps1 ├── Initial Access │ └── Test-DomainRegistration.ps1 ├── Persistence │ ├── Add-GroupObject.ps1 │ ├── Add-StorageAccountSasToken.ps1 │ ├── Set-AdministrativeUnit.ps1 │ ├── Set-AppRegistrationOwner.ps1 │ ├── Set-FederatedIdentity.ps1 │ ├── Set-FunctionAppSecret.ps1 │ ├── Set-ManagedIdentityPermission.ps1 │ ├── Set-ServicePrincipalCredential.ps1 │ └── Set-UserCredential.ps1 ├── Reconnaissance │ ├── Get-AdministrativeUnit.ps1 │ ├── Get-EntraIDPermissions.ps1 │ ├── Get-EntraInformation.ps1 │ ├── Get-EntraRoleMember.ps1 │ ├── Get-ManagedIdentity.ps1 │ ├── Get-StorageContainerList.ps1 │ ├── Invoke-AzBatch.ps1 │ ├── Invoke-MSGraph.ps1 │ └── anonymous │ │ ├── Find-AzurePublicResource.ps1 │ │ ├── Find-DnsRecords.ps1 │ │ ├── Find-PublicStorageContainer.ps1 │ │ └── Find-SubDomain.ps1 └── Resource Development │ ├── Add-EntraApplication.ps1 │ ├── Connect-ServicePrincipal.ps1 │ ├── Copy-PrivilegedUser.ps1 │ └── Restore-DeletedIdentity.ps1 ├── README.md ├── RELEASE-NOTES-v0.21.0.md ├── RELEASE-NOTES-v0.23.0.md ├── SECURITY.md ├── Tests ├── Find-PublicStorageContainer.Tests.ps1 ├── Get-AzBlobContent.Tests.ps1 ├── Get-AzBlobContentRegex.Tests.ps1 └── Get-AzResourceSecretList.Tests.ps1 ├── invokes └── accesstokens.ps1 └── support-files ├── AzureRoles.csv ├── EntraRoles.csv ├── ServiceTags.json ├── Untitled Diagram.drawio ├── appRoleIds.csv ├── permutations.txt ├── privileged-roles.json ├── subdomains.json └── userAgents.json /.DS_Store: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/.DS_Store -------------------------------------------------------------------------------- /.devcontainer/.devcontainter/welcome: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/.devcontainer/.devcontainter/welcome -------------------------------------------------------------------------------- /.devcontainer/Dockerfile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/.devcontainer/Dockerfile -------------------------------------------------------------------------------- /.devcontainer/devcontainer.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/.devcontainer/devcontainer.json -------------------------------------------------------------------------------- /.devcontainer/update.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | git pull origin main -------------------------------------------------------------------------------- /.github/DISCUSSION_TEMPLATE/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/.github/DISCUSSION_TEMPLATE/README.md -------------------------------------------------------------------------------- /.github/ISSUE_TEMPLATE/bug_report.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/.github/ISSUE_TEMPLATE/bug_report.md -------------------------------------------------------------------------------- /.github/ISSUE_TEMPLATE/feauture_request.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/.github/ISSUE_TEMPLATE/feauture_request.md -------------------------------------------------------------------------------- /.github/discussions/live-event-reconnaissance-demo.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/.github/discussions/live-event-reconnaissance-demo.yml -------------------------------------------------------------------------------- /.github/media/README.md: -------------------------------------------------------------------------------- 1 | # Media Folder 2 | -------------------------------------------------------------------------------- /.github/media/azure-hacking-corp.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/.github/media/azure-hacking-corp.jpg -------------------------------------------------------------------------------- /.github/media/banner.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/.github/media/banner.png -------------------------------------------------------------------------------- /.github/media/cateye.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/.github/media/cateye.png -------------------------------------------------------------------------------- /.github/media/loaded.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/.github/media/loaded.png -------------------------------------------------------------------------------- /.github/workflows/Abuse-FederatedCredentials.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/.github/workflows/Abuse-FederatedCredentials.yml -------------------------------------------------------------------------------- /.github/workflows/Sami_app.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/.github/workflows/Sami_app.yml -------------------------------------------------------------------------------- /.github/workflows/add-comments.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/.github/workflows/add-comments.yml -------------------------------------------------------------------------------- /.github/workflows/fetch-token.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/.github/workflows/fetch-token.yml -------------------------------------------------------------------------------- /.github/workflows/mc2mc-add-member.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/.github/workflows/mc2mc-add-member.yml -------------------------------------------------------------------------------- /.github/workflows/mc2mc-clone-user.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/.github/workflows/mc2mc-clone-user.yml -------------------------------------------------------------------------------- /.github/workflows/pullrequest/pester.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/.github/workflows/pullrequest/pester.yml -------------------------------------------------------------------------------- /.github/workflows/pullrequest/release.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/.github/workflows/pullrequest/release.yml -------------------------------------------------------------------------------- /.github/workflows/release.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/.github/workflows/release.yml -------------------------------------------------------------------------------- /.github/workflows/uami.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/.github/workflows/uami.yaml -------------------------------------------------------------------------------- /.github/workflows/validate-changelog-update.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/.github/workflows/validate-changelog-update.yaml -------------------------------------------------------------------------------- /.github/workflows/validate-version-update.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/.github/workflows/validate-version-update.yaml -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/.gitignore -------------------------------------------------------------------------------- /BlackCat.psd1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/BlackCat.psd1 -------------------------------------------------------------------------------- /BlackCat.psm1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/BlackCat.psm1 -------------------------------------------------------------------------------- /CHANGELOG.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/CHANGELOG.md -------------------------------------------------------------------------------- /CODE_OF_CONDUCT.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/CODE_OF_CONDUCT.md -------------------------------------------------------------------------------- /CONTRIBUTING.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/CONTRIBUTING.md -------------------------------------------------------------------------------- /IMPROVEMENTS.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/IMPROVEMENTS.md -------------------------------------------------------------------------------- /LICENSE.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/LICENSE.md -------------------------------------------------------------------------------- /Private/ConvertFrom-AzAccessToken.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Private/ConvertFrom-AzAccessToken.ps1 -------------------------------------------------------------------------------- /Private/Format-BlackCatOutput.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Private/Format-BlackCatOutput.ps1 -------------------------------------------------------------------------------- /Private/Get-AccessToken.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Private/Get-AccessToken.ps1 -------------------------------------------------------------------------------- /Private/Get-AllPages.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Private/Get-AllPages.ps1 -------------------------------------------------------------------------------- /Private/Get-CidrAddresses.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Private/Get-CidrAddresses.ps1 -------------------------------------------------------------------------------- /Private/Invoke-BlackCat.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Private/Invoke-BlackCat.ps1 -------------------------------------------------------------------------------- /Private/Invoke-SplitJWT.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Private/Invoke-SplitJWT.ps1 -------------------------------------------------------------------------------- /Private/Reference/AzureRoles.csv: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Private/Reference/AzureRoles.csv -------------------------------------------------------------------------------- /Private/Reference/EntraRoles.csv: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Private/Reference/EntraRoles.csv -------------------------------------------------------------------------------- /Private/Reference/ServiceTags.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Private/Reference/ServiceTags.json -------------------------------------------------------------------------------- /Private/Reference/appRoleIds.csv: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Private/Reference/appRoleIds.csv -------------------------------------------------------------------------------- /Private/Reference/privileged-roles.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Private/Reference/privileged-roles.json -------------------------------------------------------------------------------- /Private/Reference/subdomains.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Private/Reference/subdomains.json -------------------------------------------------------------------------------- /Private/Reference/userAgents.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Private/Reference/userAgents.json -------------------------------------------------------------------------------- /Private/Use-BlackCatCache.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Private/Use-BlackCatCache.ps1 -------------------------------------------------------------------------------- /Private/Write-BlackCatLog.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Private/Write-BlackCatLog.ps1 -------------------------------------------------------------------------------- /Private/Write-Message.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Private/Write-Message.ps1 -------------------------------------------------------------------------------- /Public/.DS_Store: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/.DS_Store -------------------------------------------------------------------------------- /Public/Credential Access/Get-AzResourceSecretList.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Credential Access/Get-AzResourceSecretList.ps1 -------------------------------------------------------------------------------- /Public/Credential Access/Get-KeyVaultSecret.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Credential Access/Get-KeyVaultSecret.ps1 -------------------------------------------------------------------------------- /Public/Credential Access/Get-StorageAccountKey.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Credential Access/Get-StorageAccountKey.ps1 -------------------------------------------------------------------------------- /Public/Discovery/Find-AzurePermissionHolder.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Discovery/Find-AzurePermissionHolder.ps1 -------------------------------------------------------------------------------- /Public/Discovery/Find-EntraPermissionHolder.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Discovery/Find-EntraPermissionHolder.ps1 -------------------------------------------------------------------------------- /Public/Discovery/Get-AppRolePermission.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Discovery/Get-AppRolePermission.ps1 -------------------------------------------------------------------------------- /Public/Discovery/Get-FederatedAppCredential.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Discovery/Get-FederatedAppCredential.ps1 -------------------------------------------------------------------------------- /Public/Discovery/Get-PrivilegedApp.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Discovery/Get-PrivilegedApp.ps1 -------------------------------------------------------------------------------- /Public/Discovery/Get-PrivilegedServicePrincipal.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Discovery/Get-PrivilegedServicePrincipal.ps1 -------------------------------------------------------------------------------- /Public/Discovery/Get-ResourcePermission.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Discovery/Get-ResourcePermission.ps1 -------------------------------------------------------------------------------- /Public/Discovery/Get-RoleAssignment.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Discovery/Get-RoleAssignment.ps1 -------------------------------------------------------------------------------- /Public/Discovery/Get-ServicePrincipalCredential.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Discovery/Get-ServicePrincipalCredential.ps1 -------------------------------------------------------------------------------- /Public/Discovery/Get-ServicePrincipalsPermission.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Discovery/Get-ServicePrincipalsPermission.ps1 -------------------------------------------------------------------------------- /Public/Exfiltration/Export-AzAccessToken.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Exfiltration/Export-AzAccessToken.ps1 -------------------------------------------------------------------------------- /Public/Exfiltration/anonymous/Get-PublicBlobContent.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Exfiltration/anonymous/Get-PublicBlobContent.ps1 -------------------------------------------------------------------------------- /Public/Helpers/Clear-BlackCatCache.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Helpers/Clear-BlackCatCache.ps1 -------------------------------------------------------------------------------- /Public/Helpers/ConvertFrom-JWT.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Helpers/ConvertFrom-JWT.ps1 -------------------------------------------------------------------------------- /Public/Helpers/Find-AzureServiceTag.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Helpers/Find-AzureServiceTag.ps1 -------------------------------------------------------------------------------- /Public/Helpers/Get-BlackCatCacheMemoryStats.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Helpers/Get-BlackCatCacheMemoryStats.ps1 -------------------------------------------------------------------------------- /Public/Helpers/Get-BlackCatCacheStats.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Helpers/Get-BlackCatCacheStats.ps1 -------------------------------------------------------------------------------- /Public/Helpers/Get-CurrentUserAgent.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Helpers/Get-CurrentUserAgent.ps1 -------------------------------------------------------------------------------- /Public/Helpers/Get-UserAgentStatus.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Helpers/Get-UserAgentStatus.ps1 -------------------------------------------------------------------------------- /Public/Helpers/Invoke-StealthOperation.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Helpers/Invoke-StealthOperation.ps1 -------------------------------------------------------------------------------- /Public/Helpers/Invoke-Update.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Helpers/Invoke-Update.ps1 -------------------------------------------------------------------------------- /Public/Helpers/New-AuthHeader.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Helpers/New-AuthHeader.ps1 -------------------------------------------------------------------------------- /Public/Helpers/New-JWT.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Helpers/New-JWT.ps1 -------------------------------------------------------------------------------- /Public/Helpers/Optimize-BlackCatCacheMemory.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Helpers/Optimize-BlackCatCacheMemory.ps1 -------------------------------------------------------------------------------- /Public/Helpers/Read-SASToken.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Helpers/Read-SASToken.ps1 -------------------------------------------------------------------------------- /Public/Helpers/Select-AzureContext.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Helpers/Select-AzureContext.ps1 -------------------------------------------------------------------------------- /Public/Helpers/Set-UserAgentRotation.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Helpers/Set-UserAgentRotation.ps1 -------------------------------------------------------------------------------- /Public/Helpers/Show-BlackCatCommands.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Helpers/Show-BlackCatCommands.ps1 -------------------------------------------------------------------------------- /Public/Helpers/Update-AzureServiceTag.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Helpers/Update-AzureServiceTag.ps1 -------------------------------------------------------------------------------- /Public/Helpers/Write-CacheTypeStats.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Helpers/Write-CacheTypeStats.ps1 -------------------------------------------------------------------------------- /Public/Impair Defenses/Set-AzNetworkSecurityGroupRule.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Impair Defenses/Set-AzNetworkSecurityGroupRule.ps1 -------------------------------------------------------------------------------- /Public/Initial Access/Test-DomainRegistration.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Initial Access/Test-DomainRegistration.ps1 -------------------------------------------------------------------------------- /Public/Persistence/Add-GroupObject.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Persistence/Add-GroupObject.ps1 -------------------------------------------------------------------------------- /Public/Persistence/Add-StorageAccountSasToken.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Persistence/Add-StorageAccountSasToken.ps1 -------------------------------------------------------------------------------- /Public/Persistence/Set-AdministrativeUnit.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Persistence/Set-AdministrativeUnit.ps1 -------------------------------------------------------------------------------- /Public/Persistence/Set-AppRegistrationOwner.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Persistence/Set-AppRegistrationOwner.ps1 -------------------------------------------------------------------------------- /Public/Persistence/Set-FederatedIdentity.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Persistence/Set-FederatedIdentity.ps1 -------------------------------------------------------------------------------- /Public/Persistence/Set-FunctionAppSecret.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Persistence/Set-FunctionAppSecret.ps1 -------------------------------------------------------------------------------- /Public/Persistence/Set-ManagedIdentityPermission.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Persistence/Set-ManagedIdentityPermission.ps1 -------------------------------------------------------------------------------- /Public/Persistence/Set-ServicePrincipalCredential.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Persistence/Set-ServicePrincipalCredential.ps1 -------------------------------------------------------------------------------- /Public/Persistence/Set-UserCredential.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Persistence/Set-UserCredential.ps1 -------------------------------------------------------------------------------- /Public/Reconnaissance/Get-AdministrativeUnit.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Reconnaissance/Get-AdministrativeUnit.ps1 -------------------------------------------------------------------------------- /Public/Reconnaissance/Get-EntraIDPermissions.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Reconnaissance/Get-EntraIDPermissions.ps1 -------------------------------------------------------------------------------- /Public/Reconnaissance/Get-EntraInformation.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Reconnaissance/Get-EntraInformation.ps1 -------------------------------------------------------------------------------- /Public/Reconnaissance/Get-EntraRoleMember.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Reconnaissance/Get-EntraRoleMember.ps1 -------------------------------------------------------------------------------- /Public/Reconnaissance/Get-ManagedIdentity.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Reconnaissance/Get-ManagedIdentity.ps1 -------------------------------------------------------------------------------- /Public/Reconnaissance/Get-StorageContainerList.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Reconnaissance/Get-StorageContainerList.ps1 -------------------------------------------------------------------------------- /Public/Reconnaissance/Invoke-AzBatch.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Reconnaissance/Invoke-AzBatch.ps1 -------------------------------------------------------------------------------- /Public/Reconnaissance/Invoke-MSGraph.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Reconnaissance/Invoke-MSGraph.ps1 -------------------------------------------------------------------------------- /Public/Reconnaissance/anonymous/Find-AzurePublicResource.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Reconnaissance/anonymous/Find-AzurePublicResource.ps1 -------------------------------------------------------------------------------- /Public/Reconnaissance/anonymous/Find-DnsRecords.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Reconnaissance/anonymous/Find-DnsRecords.ps1 -------------------------------------------------------------------------------- /Public/Reconnaissance/anonymous/Find-PublicStorageContainer.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Reconnaissance/anonymous/Find-PublicStorageContainer.ps1 -------------------------------------------------------------------------------- /Public/Reconnaissance/anonymous/Find-SubDomain.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Reconnaissance/anonymous/Find-SubDomain.ps1 -------------------------------------------------------------------------------- /Public/Resource Development/Add-EntraApplication.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Resource Development/Add-EntraApplication.ps1 -------------------------------------------------------------------------------- /Public/Resource Development/Connect-ServicePrincipal.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Resource Development/Connect-ServicePrincipal.ps1 -------------------------------------------------------------------------------- /Public/Resource Development/Copy-PrivilegedUser.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Resource Development/Copy-PrivilegedUser.ps1 -------------------------------------------------------------------------------- /Public/Resource Development/Restore-DeletedIdentity.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Public/Resource Development/Restore-DeletedIdentity.ps1 -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/README.md -------------------------------------------------------------------------------- /RELEASE-NOTES-v0.21.0.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/RELEASE-NOTES-v0.21.0.md -------------------------------------------------------------------------------- /RELEASE-NOTES-v0.23.0.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/RELEASE-NOTES-v0.23.0.md -------------------------------------------------------------------------------- /SECURITY.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/SECURITY.md -------------------------------------------------------------------------------- /Tests/Find-PublicStorageContainer.Tests.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Tests/Find-PublicStorageContainer.Tests.ps1 -------------------------------------------------------------------------------- /Tests/Get-AzBlobContent.Tests.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Tests/Get-AzBlobContent.Tests.ps1 -------------------------------------------------------------------------------- /Tests/Get-AzBlobContentRegex.Tests.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Tests/Get-AzBlobContentRegex.Tests.ps1 -------------------------------------------------------------------------------- /Tests/Get-AzResourceSecretList.Tests.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/Tests/Get-AzResourceSecretList.Tests.ps1 -------------------------------------------------------------------------------- /invokes/accesstokens.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/invokes/accesstokens.ps1 -------------------------------------------------------------------------------- /support-files/AzureRoles.csv: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/support-files/AzureRoles.csv -------------------------------------------------------------------------------- /support-files/EntraRoles.csv: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/support-files/EntraRoles.csv -------------------------------------------------------------------------------- /support-files/ServiceTags.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/support-files/ServiceTags.json -------------------------------------------------------------------------------- /support-files/Untitled Diagram.drawio: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/support-files/Untitled Diagram.drawio -------------------------------------------------------------------------------- /support-files/appRoleIds.csv: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/support-files/appRoleIds.csv -------------------------------------------------------------------------------- /support-files/permutations.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/support-files/permutations.txt -------------------------------------------------------------------------------- /support-files/privileged-roles.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/support-files/privileged-roles.json -------------------------------------------------------------------------------- /support-files/subdomains.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/support-files/subdomains.json -------------------------------------------------------------------------------- /support-files/userAgents.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/azurekid/blackcat/HEAD/support-files/userAgents.json --------------------------------------------------------------------------------