microsoft
Dusseldorf is an out-of-band security tool to help in security research.
Dusseldorf is a private, customizable out-of-band application security testing (OAST) platform. It captures inbound network traffic across multiple protocols and lets you craft automated responses for security validation workflows.
It is designed for security professionals who need controlled infrastructure to detect and validate out-of-band vulnerabilities such as SSRF, XSS, SSTI, XXE, and related classes of defects.
MCP server that turns the full ticket lifecycle into a guided conversation — no portal, no context switch, no re-typing the resource ID Azure already knows about.
Build modern apps and powerful cloud services. Build. Test. Deploy.
.NET is the free, open-source, cross-platform framework for building modern apps and powerful cloud services.
Related contents:
winapp, the Windows App Development CLI, is a single command-line interface for managing Windows SDKs, packaging, generating app identity, manifests, certificates, and using build tools with any app framework.
Related contents:
The Language Server Protocol (LSP) defines the protocol used between an editor or IDE and a language server that provides language features like auto complete, go to definition, find all references etc. The goal of the Language Server Index Format (LSIF, pronounced like "else if") is to support rich code navigation in development tools or a Web UI without needing a local copy of the source code.
Related contents:
WinGet is the Windows Package Manager. This project includes a CLI (Command Line Interface), PowerShell modules, and a COM (Component Object Model) API (Application Programming Interface).
Related contents:
Clarity with every click. Clarity is a free product that captures how people use your site. Setup is easy and you'll start getting data in minutes.
Agent Lightning is the absolute trainer to light up AI agents.
agent-lightning is an open-source framework for training and optimizing AI agents—enabling reinforcement learning (RL), automatic prompt optimization, supervised fine-tuning, and more—without requiring substantial changes to existing agent code. It works with virtually any agent framework (e.g., LangChain, OpenAI Agents SDK, and AutoGen) and provides modular components to collect agent execution data and iteratively improve agent performance via a decoupled RL training loop.
12 weeks, 26 lessons, 52 quizzes, classic Machine Learning for all.
Cloud Advocates at Microsoft are pleased to offer a 12-week, 26-lesson curriculum all about Machine Learning. In this curriculum, you will learn about what is sometimes called classic machine learning, using primarily Scikit-learn as a library and avoiding deep learning, which is covered in our AI for Beginners' curriculum. Pair these lessons with our 'Data Science for Beginners' curriculum, as well!
Related contents:
SQL & noSQL database manager.
Powerful and easy to use (no)SQL database client for MySQL, PostgreSQL, Oracle, SQL Server, SQLite, MongoDB, Redis, …
DbGate is cross-platform database manager. It's designed to be simple to use and effective, when working with more databases simultaneously. But there are also many advanced features like schema compare, visual query designer, chart visualisation or batch export and import.
Microsoft's Git hosting, with integrated AI scraping for OpenAI.
Related contents:
Supercharged AI Development Environment.
Amplifier is a coordinated and accelerated development system that provides specialized AI agents, persistent knowledge that compounds over time, and workflows that execute complex methodologies.
This course is designed to guide beginners through the exciting world of Edge AI, covering fundamental concepts, popular models, inference techniques, device-specific applications, model optimization, and the development of intelligent Edge AI agents.
A framework for building AI agents and applications.
AutoGen is a framework for creating multi-agent AI applications that can act autonomously or work alongside humans.
Related contents:
Microsoft BASIC for 6502 Microprocessor - Version 1.1 .
This assembly language source code represents one of the most historically significant pieces of software from the early personal computer era. It is the complete source code for Microsoft BASIC Version 1.1 for the 6502 microprocessor, originally developed and copyrighted by Microsoft in 1976-1978.
Related contents:
POML (Prompt Orchestration Markup Language) is a novel markup language designed to bring structure, maintainability, and versatility to advanced prompt engineering for Large Language Models (LLMs). It addresses common challenges in prompt development, such as lack of structure, complex data integration, format sensitivity, and inadequate tooling. POML provides a systematic way to organize prompt components, integrate diverse data types seamlessly, and manage presentation variations, empowering developers to create more sophisticated and reliable LLM applications.
Winget-Repo is a local, private repository for Winget.
Winget-Repo Winget-Repo is a private repository for the Windows Package Manager (Winget), designed to provide software and updates within local networks without internet access. It allows centralized management and efficient installation and updating of software on multiple Windows clients.
LISA is developed and maintained by Microsoft, to empower Linux validation. Linux Integration Services Automation (LISA) is a Linux quality validation system, which consists of two parts：
-
A test framework to drive test execution.
-
A set of test suites to verify Linux kernel/distribution quality.
Bicep is a language for declaratively deploying Azure resources. You can use Bicep instead of JSON for developing your Azure Resource Manager templates (ARM templates).
Related contents:
Bypass Microsoft Account creation during Windows 11/10 install.
With Microsoft’s recent Windows 11 updates, the bypass for the network requirement (NRO) was "effectively" blocked, forcing users into an online account creation. MSAPatcher brings back the simplicity of the bypassnro.cmd one-liner, allowing you to bypass the NRO without having to manually add registry keys or deal with complex workarounds.
Related contents:
Sysmon for Linux is a tool that monitors and logs system activity including process lifetime, network connections, file system writes, and more. Sysmon works across reboots and uses advanced filtering to help identify malicious activity as well as how intruders and malware operate on your network. Sysmon for Linux is part of Sysinternals.
🪄 Create rich visualizations with AI
Data Formulator is an application from Microsoft Research that uses large language models to transform data, expediting the practice of data visualization.
Data Formulator is an AI-powered tool for analysts to iteratively create rich visualizations. Unlike most chat-based AI tools where users need to describe everything in natural language, Data Formulator combines user interface interactions (UI) and natural language (NL) inputs for easier interaction. This blended approach makes it easier for users to describe their chart designs while delegating data transformation to AI.
The Microsoft Graph software development kits (SDKs) are designed to simplify building high-quality, efficient, resilient applications that access Microsoft Graph. The SDKs include two components: a service library and a core library.
The service library contains models and request builders generated from Microsoft Graph metadata. The service library provides a rich, strongly-typed, and discoverable experience when working with the many datasets available in Microsoft Graph.
Misconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive and hardening guidance.
TorchGeo: datasets, samplers, transforms, and pre-trained models for geospatial data.
TorchGeo is a PyTorch domain library, similar to torchvision, providing datasets, samplers, transforms, and pre-trained models specific to geospatial data.
Dev Proxy is an API simulator that helps you effortlessly test your app beyond the happy path.
You test your app to make sure it works as intended. But what if the APIs you use fail? Will your app lose your customer's data? How do you test for this? Simulating API failures is hard. You end up writing code that you won't be shipping or worse: not testing at all. That's why we built Dev Proxy, to simulate API errors so that you can easily test your app without changing your code.
Monkey365 is an Open Source security tool that can be used to easily conduct not only Microsoft 365, but also Azure subscriptions and Microsoft Entra ID security configuration reviews without the significant overhead of learning tool APIs or complex admin panels from the start.
Policy Module for Microsoft Active Directory Certificate Services.
TameMyCerts is a policy module for Microsoft Active Directory Certificate Services (AD CS) enterprise certification authorities that enables security automation for a lot of use cases in the PKI field.
An offensive postexploitation tool that will give you complete control over the Outlook desktop application and therefore to the emails configured in it.
OmniParser is a comprehensive method for parsing user interface screenshots into structured and easy-to-understand elements, which significantly enhances the ability of GPT-4V to generate actions that can be accurately grounded in the corresponding regions of the interface.
Generative AI Scripting.
Programmatically assemble prompts for LLMs using JavaScript.
OpenVMM is a modular, cross-platform, general-purpose Virtual Machine Monitor (VMM), written in Rust.
Document Your Datacenter With PowerShell.
As Built Report is an open source configuration document framework which utilises Microsoft PowerShell to produce as-built documentation in multiple document formats for multiple vendors and technologies. The framework allows users to easily generate clear and consistent documentation, for any environment which supports Microsoft PowerShell and/or a RESTful API.
This project is specifically made for brand new directories and ease their creation with all security rules in place:
- Remove legacy protocols/setup used by Microsoft for compliance purposes
- Enforce the use of modern alogrithm for cyphering and authentication
- Enforce LDAPS when a client requests a connection to your DC
- Enforce the default password strategy to match with modern expectation
- Add other Domain Controllers to your secured domain
Related contents:
Linux OS for Azure 1P services and edge appliances
Describe APIs. Describe your data up front and generate schemas, API specifications, client / server code, docs, and more.
TypeSpec is a language for defining cloud service APIs and shapes. TypeSpec is a highly extensible language with primitives that can describe API shapes common among REST, OpenAPI, gRPC, and other protocols.
DISKSPD is a storage load generator / performance test tool from the Windows/Windows Server and Cloud Server Infrastructure Engineering teams.
Windows in a Docker container.
Docker image with QEMU and noVNC web app allowing to run Windows on GNU/Linux hosts.
Related contents:
Welcome to the repository for Sudo for Windows 🥪. Sudo for Windows allows users to run elevated commands directly from unelevated terminal windows.
Sudo is available for Windows 11 builds 26045 and later. If you're on an Insiders build with sudo, you can enable it in the Windows Settings app, on the "Developer Features" page.
A comprehensive tool that provides an insightful analysis of Microsof's monthly security updates.
PatchaPalooza uses the power of Microsoft's MSRC CVRF API to fetch, store, and analyze security update data. Designed for cybersecurity professionals, it offers a streamlined experience for those who require a quick yet detailed overview of vulnerabilities, their exploitation status, and more. This tool operates entirely offline once the data has been fetched, ensuring that your analyses can continue even without an internet connection.
An attack tool for simple, fast & effective security testing of M365 & Azure AD.
MAAD-AF is designed to make cloud security testing simple, fast and effective. Through its virtually no-setup requirement and easy to use interactive attack modules, security teams can test their security controls, detection and response capabilities easily and swiftly.
(Self fix): a tool allowing users to solve their issues themselves and reduce tickets/calls to your support team.
FNA is a reimplementation of the Microsoft XNA Game Studio 4.0 Refresh libraries.
This is FNA, an XNA4 reimplementation that focuses solely on developing a fully accurate XNA4 runtime for the desktop.
FNA is primarily developed by video game porter Ethan Lee, who has shipped more than four dozen ports of XNA games using the exact branch that you see on GitHub today!
Automatic Generation of Visualizations and Infographics with LLMs.
LIDA is a library for generating data visualizations and data-faithful infographics. LIDA is grammar agnostic (will work with any programming language and visualization libraries e.g. matplotlib, seaborn, altair, d3 etc) and works with multiple large language model providers (OpenAI, PaLM, Cohere, Huggingface). Details on the components of LIDA are described in the paper here and in this tutorial notebook. See the project page here for updates!.
Playwright enables reliable end-to-end testing for modern web apps.
Playwright is a framework for Web Testing and Automation. It allows testing Chromium, Firefox and WebKit with a single API. Playwright is built to enable cross-browser web automation that is ever-green, capable, reliable and fast.
Related contents:
Scripts to build a trimmed-down Windows 11 image.
This is a script to automate the build of a streamlined Windows 11 image, similar to tiny11. My main goal is to use only Microsoft utilities like DISM, and nothing external. The only executable included is oscdimg.exe, which is provided in the Windows ADK and it is used to create bootable ISO images. Also included is an unattended answer file, which is used to bypass the MS account on OOBE and to deploy the image with the /compact flag. It's open-source, so feel free to add or remove anything you want! Feedback is also much appreciated.
Based off of Windows 11 Pro 22H2, tiny11 has everything you need for a comfortable computing experience without the bloat and clutter of a standard Windows installation.
Use Kiota to generate API clients to call any OpenAPI-described API.
Kiota is a command line tool for generating an API client to call any OpenAPI described API you are interested in. The goal is to eliminate the need to take a dependency on a different API SDK for every API that you need to call. Kiota API clients provide a strongly typed experience with all the features you expect from a high quality API SDK, but without having to learn a new library for every HTTP API.
Microsoft Threat Intelligence Python Security Tools. msticpy is a library for InfoSec investigation and hunting in Jupyter Notebooks.
TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts.
Azure Cloud Advocates at Microsoft are pleased to offer a 12-week, 24-lesson curriculum all about Artificial Intelligence.
TypeScript is JavaScript with syntax for types. TypeScript is a strongly typed programming language that builds on JavaScript, giving you better tooling at any scale.
TypeScript is a language for application-scale JavaScript. TypeScript adds optional types to JavaScript that support tools for large-scale JavaScript applications for any browser, for any host, on any OS. TypeScript compiles to readable, standards-based JavaScript.
Related contents:
- The Concise TypeScript Book.
- Hyper-Typing @ Paolo Scanferla.
- Identify and Fix Code Smells in TypeScript @ Engroso's dev.to.
- Satisfies in TypeScript @ Frontend Masters Blog.
- The Temporal Dead Zone, or why the TypeScript codebase is littered with var statements @ Vincent Rolfs.
- TypeScript’s rise in the AI era: Insights from Lead Architect, Anders Hejlsberg @ GitHub Blog.
- The Inner Workings of JavaScript Source Maps @ Polar Signals.
- Experiment: making TypeScript immutable-by-default @ Evan Hahn.
- TIL:
satisfiesis my favorite TypeScript keyword @ Jerred Shepherd. - Stop writing if statements for your CLI flags @ Hackers' Pub.
- JSDoc is TypeScript @ culi.bear.blog.
- I was wrong about TypeScript: Part 1 @ Amadu's & Don'ts.
- Fixing TypeScript Performance Problems: A Case Study @ viget.
- TypeScript or Tears @ nicolas.vbgh's dev.to.
- Seven Years to TypeScript: Migrating 11,000 Files at Patreon @ Engineering at Patreon.
- Parse, Don't Validate — In a Language That Doesn't Want You To @ Cekrem.GitHub.IO.
Windows system utilities to maximize productivity. Microsoft PowerToys is a set of utilities for power users to tune and streamline their Windows experience for greater productivity.
Vowpal Wabbit provides fast, efficient, and flexible online machine learning techniques for reinforcement learning, supervised learning, and more. It is influenced by an ecosystem of community contributions, academic research, and proven algorithms. Microsoft Research is a major contributor to Vowpal Wabbit.
Simple tool to configure Windows Filtering Platform (WFP) which can configure network activity on your computer.
The lightweight application is less than a megabyte, and it is compatible with Windows 7 SP1 and higher operating systems. You can download either the installer or portable version. For correct working you are require administrator rights.
Microsoft MakeCode is a free online learn-to-code platform where anyone can build games, code devices, and mod Minecraft!