HackingLZ

#!/usr/bin/env python3
import ast, re, sys

EMOJI_RE = re.compile(
    r"[\U0001F300-\U0001F5FF\U0001F600-\U0001F64F\U0001F680-\U0001F6FF"
    r"\U0001F700-\U0001F77F\U0001F780-\U0001F7FF\U0001F800-\U0001F8FF"
    r"\U0001F900-\U0001F9FF\U0001FA00-\U0001FA6F\U0001FA70-\U0001FAFF"
    r"\u2702-\u27B0\u24C2-\U0001F251\U00010000-\U0010FFFF]"
)

HackingLZ

#!/usr/bin/env python3
"""
M365 OSINT Reconnaissance Tool
Based on techniques from: https://dstreefkerk.github.io/2025-07-m365-email-osint-after-lockdown/

This script performs modern M365/Azure AD reconnaissance after Microsoft's lockdown of traditional
enumeration methods. It uses multiple validation techniques to discover organizational information
and attempts to infer MOERA domains.
"""

HackingLZ

use aes::Aes256;
use base64;
use cbc::{Decryptor, Encryptor};
use cbc::cipher::{block_padding::Pkcs7, BlockDecryptMut, BlockEncryptMut, KeyIvInit};
use hostname;
use rand::{Rng, RngCore};
use sha2::{Digest, Sha256};
use std::env;
use std::io::Read;
use std::process::{Command, Stdio};

HackingLZ

hashcat (v6.2.6) starting in benchmark mode

Benchmarking uses hand-optimized kernel code by default.
You can use it in your cracking session by setting the -O option.
Note: Using optimized kernel code limits the maximum supported password length.
To disable the optimized kernel code in benchmark mode, use the -w option.

* Device #2: Apple's OpenCL drivers (GPU) are known to be unreliable.
             You have been warned.

HackingLZ

# https://cloud.google.com/blog/topics/threat-intelligence/untangling-iran-apt42-operations/
import argparse
import random
import win32com.client

def insert_digit(word, digit):
    pos = random.randint(1, len(word) - 1)
    return word[:pos] + digit + word[pos:]

def generate_command(url, file_path):

HackingLZ

import requests
import time
import os

# Nessus API credentials and host
nessus_url = "https://123.123.123.123:8834"
access_key = "x"
secret_key = "x"
headers = {
    'X-ApiKeys': f'accessKey={access_key}; secretKey={secret_key}',

HackingLZ

import argparse
import random
import re
import requests
import string
import socket
import xml.etree.ElementTree as ET

def generate_random_username(min_length=7, max_length=16):
    length = random.randint(min_length, max_length)

HackingLZ

import argparse
import zipfile
import os
import re

def modify_all_files_in_zip(zip_path, search_pattern, replace_with):
    temp_dir = 'temp_unzip'
    os.makedirs(temp_dir, exist_ok=True)

    with zipfile.ZipFile(zip_path, 'r') as zip_ref:

HackingLZ

#!/usr/bin/python3
# https://trufflesecurity.com/blog/canaries

import argparse
import base64
import binascii
import csv

parser = argparse.ArgumentParser(description='Process AWS Key ID(s) to AWS Account ID(s)')
parser.add_argument('-k', '--keyid', type=str, help='Single AWS Key ID to process')

HackingLZ

#https://twitter.com/banthisguy9349/status/1745039649750360459
import argparse
import base64
import codecs
from cryptography.hazmat.primitives.ciphers import Cipher, algorithms, modes
from cryptography.hazmat.backends import default_backend
from os import urandom
import urllib.request
import hashlib
import re