Christoph Falta

MicrosoftWontFixList. A list of vulnerabilities or design flaws that Microsoft does not intend to fix. Since the number is growing, I decided to make a list. This list covers only vulnerabilities that came up in July 2021 (and SpoolSample ;-))

adsec. An introduction to Active Directory security

PowerShellArmoury. A PowerShell armoury for security guys and girls

PoshADCS. A proof of concept on attack vectors against Active Directory by abusing Active Directory Certificate Services (ADCS)

activedirectory-lab. Terraform config to spin up a domain controller and some member servers in azure

ADT. Active Directory Toolkit

PoshRandom. A not-at-all-ordered compilation of random security-related powershell scripts :-)

terraform. A collection of terraform script to create different labs in Azure

vsctool. A Powershell module to interact with volume shadow copies

msbits. A random collection of (mostly security related) scripts for Microsoft Windows, Active Directory and other Microsoft products.

PetitPotam. PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.

ioctool. Rex-ing indicators out of unstructured text (like an e-mail)

nrdscan. Scans newly registered domains (NRD) for a given list of reference domains using direct and fuzzy string matching.

cfalta.github.io. HTML

PSModuleConfig. A generic configuration management module for Powershell modules.