Monkey365 is an open-source security assessment tool for Microsoft 365, Azure, and Microsoft Entra ID. It helps security professionals identify misconfigurations, review cloud security posture, and evaluate environments against industry security best practices and compliance standards.

BadZure automates the deployment of intentionally misconfigured Entra ID tenants and Azure subscriptions, populating them with diverse entities and configurable, traversable attack paths.

A collection of Microsoft cloud product logos

KQL Queries. Microsoft Defender, Microsoft Sentinel

Bounces when a fish bites - Evilginx database monitoring with exfiltration automation

Simple pure PowerShell POC to bypass Entra / Intune Compliance Conditional Access Policy

A comprehensive list of usable Entra ID first-party clients with pre-consented Microsoft Graph scopes, in a simple YAML-file explorable with a simple HTML GUI.

Azure Managed Identity Permissions Tool, a new PowerShell tool that simplifies and streamlines the management of Managed Identity permissions in Azure (Entra ID)

Azure apim mini proxy

Collection of powershell scripts I used to complete my CARTP and CARTE courses.

Backend for frontend security using Vue.js Typescript, Vite, ASP.NET Core backend and Microsoft Entra ID

ASP.NET Core Razor page using Azure Blob Storage to upload download files securely using OAuth and Open ID Connect

results of scraping OneDrive from February 2022 - March 2025

Microsoft Entra ID external authentication methods

CA-PowerToys is a set of tools to help you manage Conditional Access policies. It is a command line tool that can be used to export, import, and clean up Conditional Access policies and associated Groups, helping to implement a Policy-as-Code approach.

FOSS tool to sync teams, users and folders from different sources to Grafana without the need for an enterprise license

PowerShell module to help getting tokens using managed identities

Making the end-user experience of Entra ID PIM slightly easier.

PowerShell module for managing Microsoft Entra PIM role activations and deactivations. Supports Entra ID Roles, Azure Resource roles and PIM for Groups with browser-based authentication, persistent configuration, and cross-platform compatibility. (Windows, MacOS and Linux)

Contains Entra Related PowerShell Scripts and Entra Related KQL for Logs in Log Analytics