Pinned Repositories
AzureAD_Autologon_Brute
Brute force attack tool for Azure AD Autologon/Seamless SSO - Source: https://arstechnica.com/information-technology/2021/09/new-azure-active-directory-password-brute-forcing-flaw-has-no-fix/
guestlist
tool for identifying guest relationships between companies
lyncsmash
locate and attack Lync/Skype for Business
ntlmscan
scan for NTLM directories
nyxgeek-rules
Custom password cracking rules for Hashcat and John the Ripper
o365recon
retrieve information via O365 and AzureAD with a valid cred
onedrive_user_enum
onedrive user enumeration - pentest tool to enumerate valid o365 users
shmoocon
Azure Survey 2025: 60 Million Users and Counting. my slide deck from shmoocon #20
track_the_planet
DEFCON 31 slide deck and video link
username-lists
list of usernames and email addresses for pentests
nyxgeek's Repositories
nyxgeek/onedrive_user_enum
onedrive user enumeration - pentest tool to enumerate valid o365 users
nyxgeek/ntlmscan
scan for NTLM directories
nyxgeek/lyncsmash
locate and attack Lync/Skype for Business
nyxgeek/guestlist
tool for identifying guest relationships between companies
nyxgeek/AzureAD_Autologon_Brute
Brute force attack tool for Azure AD Autologon/Seamless SSO - Source: https://arstechnica.com/information-technology/2021/09/new-azure-active-directory-password-brute-forcing-flaw-has-no-fix/
nyxgeek/nyxgeek-rules
Custom password cracking rules for Hashcat and John the Ripper
nyxgeek/track_the_planet
DEFCON 31 slide deck and video link
nyxgeek/teamstracker
using graph proxy to monitor teams user presence
nyxgeek/dirdevil
hiding in plain sight: part 2
nyxgeek/autodiscover_enum
time-based user enum via Basic Auth in Azure against Autodiscover
nyxgeek/cloudkicker
self-hosted Azure OSINT tool
nyxgeek/azure_survey_2025
results of scraping OneDrive from February 2022 - March 2025
nyxgeek/trontastic_usernames
top usernames from azure survey 2025
nyxgeek/bad_guest
nyxgeek/enum4linux
enum4Linux is a Linux alternative to enum.exe for enumerating data from Windows and Samba hosts.
nyxgeek/simple_scanners
simple pentest scanning scripts with no db
nyxgeek/graphninja
nyxgeek/icu
ICU for Microsoft Teams - to be released February 14, 2025
nyxgeek/exploits
my public exploit code
nyxgeek/LDAPPER
LDAP Querying without the Suck
nyxgeek/media
images, gifs, movies i've modded or made
nyxgeek/open_source_hardware
a list of open source hardware projects that interest me
nyxgeek/retrocomputing_resources
collection of old computing stuff
nyxgeek/shmoocon
Azure Survey 2025: 60 Million Users and Counting. my slide deck from shmoocon #20
nyxgeek/blogs
links to my blogs
nyxgeek/httpx
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
nyxgeek/open_source_farming
nyxgeek/stargazer
scoreboard to compare github stars among users
nyxgeek/TeamsEnum
User Enumeration of Microsoft Teams users via API
nyxgeek/tron_clu_servers
files for setting up TRON and CLU servers for scraping