BlackCat
1.0.0
Helper module to validate Azure Security
Installation Options
Owners
Copyright
(c) Rogier Dijkman. All rights reserved.
Package Details
Author(s)
- Rogier Dijkman
Tags
Functions
Get-KeyVaultSecret Get-StorageAccountKey Find-EntraPermissionHolder Find-AzurePermissionHolder Get-AdministrativeUnit Get-AppRolePermission Get-EntraIDPermissions Get-EntraInformation Get-EntraRoleMember Get-FederatedAppCredential Get-FederatedIdentityCredential Get-ManagedIdentity Get-PrivilegedApp Get-PrivilegedServicePrincipal Get-ResourcePermission Get-RoleAssignment Get-ServicePrincipalCredential Get-ServicePrincipalsPermission Get-StorageContainerList Export-AzAccessToken Get-FileShareContent Get-PublicBlobContent Clear-BlackCatCache ConvertFrom-JWT Find-AzureServiceTag Get-BlackCatCacheMemoryStats Get-BlackCatCacheStats Get-CurrentUserAgent Get-UserAgentStatus Invoke-AzBatch Invoke-MsGraph Invoke-StealthOperation Invoke-Update New-AuthHeader New-JWT Optimize-BlackCatCacheMemory Read-SASToken Select-AzureContext Set-UserAgentRotation Show-BlackCatCommands Update-AzureServiceTag Write-CacheTypeStats Disable-DiagnosticSetting Set-AzNetworkSecurityGroupRule Connect-GraphToken Add-GroupObject Add-StorageAccountSasToken Set-AdministrativeUnit Set-AppRegistrationOwner Set-FederatedIdentity Set-FunctionAppSecret Set-ManagedIdentityPermission Set-ServicePrincipalCredential Set-UserCredential Find-AzurePublicResource Find-DnsRecords Find-PublicStorageContainer Find-SubDomain Test-DomainRegistration Add-EntraApplication Connect-EntraApplication Connect-ServicePrincipal Copy-PrivilegedUser Restore-DeletedIdentity
Dependencies
FileList
- BlackCat.nuspec
- Public\Exfiltration\anonymous\Get-PublicBlobContent.ps1
- Public\Impair Defenses\Set-AzNetworkSecurityGroupRule.ps1
- Public\Credential Access\Get-AzResourceSecretList.ps1
- Public\Helpers\Clear-BlackCatCache.ps1
- Public\Initial Access\Connect-GraphToken.ps1
- BlackCat.psd1
- Public\Credential Access\Get-KeyVaultSecret.ps1
- Public\Helpers\ConvertFrom-JWT.ps1
- Public\Persistence\Add-GroupObject.ps1
- BlackCat.psm1
- Public\Credential Access\Get-StorageAccountKey.ps1
- Public\Helpers\Find-AzureServiceTag.ps1
- Public\Persistence\Add-StorageAccountSasToken.ps1
- .moduledata\moduleinfo.txt
- Public\Discovery\Find-AzurePermissionHolder.ps1
- Public\Helpers\Get-BlackCatCacheMemoryStats.ps1
- Public\Persistence\Set-AdministrativeUnit.ps1
- Private\ConvertFrom-AzAccessToken.ps1
- Public\Discovery\Find-EntraPermissionHolder.ps1
- Public\Helpers\Get-BlackCatCacheStats.ps1
- Public\Persistence\Set-AppRegistrationOwner.ps1
- Private\Format-BlackCatOutput.ps1
- Public\Discovery\Get-AdministrativeUnit.ps1
- Public\Helpers\Get-CurrentUserAgent.ps1
- Public\Persistence\Set-FederatedIdentity.ps1
- Private\Get-AccessToken.ps1
- Public\Discovery\Get-AppRolePermission.ps1
- Public\Helpers\Get-UserAgentStatus.ps1
- Public\Persistence\Set-FunctionAppSecret.ps1
- Private\Get-AllPages.ps1
- Public\Discovery\Get-EntraIDPermissions.ps1
- Public\Helpers\Invoke-AzBatch.ps1
- Public\Persistence\Set-ManagedIdentityPermission.ps1
- Private\Get-CidrAddresses.ps1
- Public\Discovery\Get-EntraInformation.ps1
- Public\Helpers\Invoke-MSGraph.ps1
- Public\Persistence\Set-ServicePrincipalCredential.ps1
- Private\Invoke-BlackCat.ps1
- Public\Discovery\Get-EntraRoleMember.ps1
- Public\Helpers\Invoke-StealthOperation.ps1
- Public\Persistence\Set-UserCredential.ps1
- Private\Invoke-SplitJWT.ps1
- Public\Discovery\Get-FederatedAppCredential.ps1
- Public\Helpers\Invoke-Update.ps1
- Public\Reconnaissance\Find-AzurePublicResource.ps1
- Private\Use-BlackCatCache.ps1
- Public\Discovery\Get-FederatedIdentityCredential.ps1
- Public\Helpers\New-AuthHeader.ps1
- Public\Reconnaissance\Find-DnsRecords.ps1
- Private\Write-BlackCatLog.ps1
- Public\Discovery\Get-ManagedIdentity.ps1
- Public\Helpers\New-JWT.ps1
- Public\Reconnaissance\Find-PublicStorageContainer.ps1
- Private\Write-Message.ps1
- Public\Discovery\Get-PrivilegedApp.ps1
- Public\Helpers\Optimize-BlackCatCacheMemory.ps1
- Public\Reconnaissance\Find-SubDomain.ps1
- Private\Reference\appRoleIds.csv
- Public\Discovery\Get-PrivilegedServicePrincipal.ps1
- Public\Helpers\Read-SASToken.ps1
- Public\Reconnaissance\Test-DomainRegistration.ps1
- Private\Reference\AzureRoles.csv
- Public\Discovery\Get-ResourcePermission.ps1
- Public\Helpers\Select-AzureContext.ps1
- Public\Resource Development\Add-EntraApplication.ps1
- Private\Reference\EntraRoles.csv
- Public\Discovery\Get-RoleAssignment.ps1
- Public\Helpers\Set-UserAgentRotation.ps1
- Public\Resource Development\Connect-EntraApplication.ps1
- Private\Reference\privileged-roles.json
- Public\Discovery\Get-ServicePrincipalCredential.ps1
- Public\Helpers\Show-BlackCatCommands.ps1
- Public\Resource Development\Connect-ServicePrincipal.ps1
- Private\Reference\ServiceTags.json
- Public\Discovery\Get-ServicePrincipalsPermission.ps1
- Public\Helpers\Update-AzureServiceTag.ps1
- Public\Resource Development\Copy-PrivilegedUser.ps1
- Private\Reference\subdomains.json
- Public\Discovery\Get-StorageContainerList.ps1
- Public\Helpers\Write-CacheTypeStats.ps1
- Public\Resource Development\Restore-DeletedIdentity.ps1
- Private\Reference\userAgents.json
- Public\Exfiltration\Export-AzAccessToken.ps1
- Public\Impair Defenses\Disable-DiagnosticSetting.ps1
- Public\Exfiltration\Get-FileShareContent.ps1
Version History
| Version | Downloads | Last updated |
|---|---|---|
| 1.0.0 (current version) | 15 | 2/10/2026 |
| 0.24.1 | 58 | 10/15/2025 |
| 0.24.0 | 7 | 10/15/2025 |
| 0.23.2 | 26 | 9/22/2025 |
| 0.23.1 | 12 | 9/22/2025 |
| 0.23.0 | 23 | 9/9/2025 |
| 0.22.0 | 39 | 8/25/2025 |
| 0.20.6 | 20 | 7/9/2025 |
| 0.20.5 | 8 | 7/9/2025 |
| 0.20.4 | 7 | 7/9/2025 |
| 0.20.3 | 10 | 7/9/2025 |
| 0.20.2 | 8 | 7/8/2025 |
| 0.20.0 | 17 | 6/30/2025 |
| 0.13.0 | 14 | 5/15/2025 |
| 0.12.6 | 9 | 4/27/2025 |
| 0.12.0 | 22 | 4/9/2025 |
| 0.11.0 | 8 | 4/9/2025 |
| 0.10.5 | 9 | 4/8/2025 |
| 0.10.4 | 10 | 4/7/2025 |