BlackCat
0.23.0
Helper module to validate Azure Security
Installation Options
Owners
Copyright
(c) Rogier Dijkman. All rights reserved.
Package Details
Author(s)
- Rogier Dijkman
Tags
Functions
Get-KeyVaultSecret Get-StorageAccountKey Find-EntraPermissionHolder Find-AzurePermissionHolder Get-AppRolePermission Get-FederatedAppCredential Get-PrivilegedApp Get-ServicePrincipalCredential Get-ServicePrincipalsPermission Get-ResourcePermission Get-RoleAssignment Export-AzAccessToken Get-PublicBlobContent ConvertFrom-JWT Show-BlackCatCommands Find-AzureServiceTag Invoke-Update Invoke-StealthOperation New-AuthHeader New-JWT Read-SASToken Select-AzureContext Update-AzureServiceTag Clear-BlackCatCache Get-BlackCatCacheStats Get-BlackCatCacheMemoryStats Optimize-BlackCatCacheMemory Write-CacheTypeStats Set-UserAgentRotation Get-UserAgentStatus Get-CurrentUserAgent Set-AzNetworkSecurityGroupRule Test-DomainRegistration Add-StorageAccountSasToken Add-GroupObject Set-AdministrativeUnit Set-AppRegistrationOwner Set-FederatedIdentity Set-ManagedIdentityPermission Set-FunctionAppSecret Set-ServicePrincipalCredential Set-UserCredential Get-AdministrativeUnits Get-EntraInformation Get-EntraIDPermissions Get-EntraRoleMember Get-ManagedIdentity Get-StorageContainerList Invoke-AzBatch Invoke-MsGraph Find-AzurePublicResource Find-PublicStorageContainer Find-SubDomain Find-DnsRecords Add-EntraApplication Copy-PrivilegedUser Restore-DeletedIdentity Connect-ServicePrincipal Get-AzResourceSecretList Set-Context
Dependencies
FileList
- BlackCat.nuspec
- Public\Helpers\New-AuthHeader.ps1
- Public\Persistence\Set-ServicePrincipalCredential.ps1
- Public\Discovery\Get-AppRolePermission.ps1
- Public\Helpers\New-JWT.ps1
- Public\Persistence\Set-UserCredential.ps1
- BlackCat.psd1
- Public\Discovery\Get-FederatedAppCredential.ps1
- Public\Helpers\Optimize-BlackCatCacheMemory.ps1
- Public\Reconnaissance\Get-AdministrativeUnits.ps1
- BlackCat.psm1
- Public\Discovery\Get-PrivilegedApp.ps1
- Public\Helpers\Read-SASToken.ps1
- Public\Reconnaissance\Get-EntraIDPermissions.ps1
- Private\ConvertFrom-AzAccessToken.ps1
- Public\Discovery\Get-ResourcePermission.ps1
- Public\Helpers\Select-AzureContext.ps1
- Public\Reconnaissance\Get-EntraInformation.ps1
- Private\Format-BlackCatOutput.ps1
- Public\Discovery\Get-RoleAssignment.ps1
- Public\Helpers\Set-UserAgentRotation.ps1
- Public\Reconnaissance\Get-EntraRoleMember.ps1
- Private\Get-AccessToken.ps1
- Public\Discovery\Get-ServicePrincipalCredential.ps1
- Public\Helpers\Show-BlackCatCommands.ps1
- Public\Reconnaissance\Get-ManagedIdentity.ps1
- Private\Get-AllPages.ps1
- Public\Discovery\Get-ServicePrincipalsPermission.ps1
- Public\Helpers\Update-AzureServiceTag.ps1
- Public\Reconnaissance\Get-StorageContainerList.ps1
- Private\Get-CidrAddresses.ps1
- Public\Exfiltration\Export-AzAccessToken.ps1
- Public\Helpers\Write-CacheTypeStats.ps1
- Public\Reconnaissance\Invoke-AzBatch.ps1
- Private\Invoke-BlackCat.ps1
- Public\Exfiltration\anonymous\Get-PublicBlobContent.ps1
- Public\Impair Defenses\Set-AzNetworkSecurityGroupRule.ps1
- Public\Reconnaissance\Invoke-MSGraph.ps1
- Private\Invoke-SplitJWT.ps1
- Public\Helpers\Clear-BlackCatCache.ps1
- Public\Initial Access\Test-DomainRegistration.ps1
- Public\Reconnaissance\anonymous\Find-AzurePublicResource.ps1
- Private\Use-BlackCatCache.ps1
- Public\Helpers\ConvertFrom-JWT.ps1
- Public\Persistence\Add-GroupObject.ps1
- Public\Reconnaissance\anonymous\Find-DnsRecords.ps1
- Private\Write-BlackCatLog.ps1
- Public\Helpers\Find-AzureServiceTag.ps1
- Public\Persistence\Add-StorageAccountSasToken.ps1
- Public\Reconnaissance\anonymous\Find-PublicStorageContainer.ps1
- Private\Write-Message.ps1
- Public\Helpers\Get-BlackCatCacheMemoryStats.ps1
- Public\Persistence\Set-AdministrativeUnit.ps1
- Public\Reconnaissance\anonymous\Find-SubDomain.ps1
- Public\Helpers\Get-BlackCatCacheStats.ps1
- Public\Persistence\Set-AppRegistrationOwner.ps1
- Public\Resource Development\Add-EntraApplication.ps1
- Public\Credential Access\Get-AzResourceSecretList.ps1
- Public\Helpers\Get-CurrentUserAgent.ps1
- Public\Persistence\Set-FederatedIdentity.ps1
- Public\Resource Development\Connect-ServicePrincipal.ps1
- Public\Credential Access\Get-KeyVaultSecret.ps1
- Public\Helpers\Get-UserAgentStatus.ps1
- Public\Persistence\Set-FunctionAppSecret.ps1
- Public\Resource Development\Copy-PrivilegedUser.ps1
- Public\Credential Access\Get-StorageAccountKey.ps1
- Public\Helpers\Invoke-StealthOperation.ps1
- Public\Persistence\Set-ManagedIdentityPermission.ps1
- Public\Resource Development\Restore-DeletedIdentity.ps1
- Public\Discovery\Find-AzurePermissionHolder.ps1
- Public\Helpers\Invoke-Update.ps1
- Public\Discovery\Find-EntraPermissionHolder.ps1
Version History
| Version | Downloads | Last updated |
|---|---|---|
| 0.23.0 (current version) | 8 | 9/9/2025 |
| 0.22.0 | 39 | 8/25/2025 |
| 0.20.6 | 20 | 7/9/2025 |
| 0.20.5 | 8 | 7/9/2025 |
| 0.20.4 | 7 | 7/9/2025 |
| 0.20.3 | 10 | 7/9/2025 |
| 0.20.2 | 8 | 7/8/2025 |
| 0.20.0 | 17 | 6/30/2025 |
| 0.13.0 | 14 | 5/15/2025 |
| 0.12.6 | 9 | 4/27/2025 |
| 0.12.0 | 22 | 4/9/2025 |
| 0.11.0 | 8 | 4/9/2025 |
| 0.10.5 | 9 | 4/8/2025 |
| 0.10.4 | 10 | 4/7/2025 |