Hagrid29 / CertifyKitLinks
Active Directory certificate abuse
☆43Updated 3 years ago
Alternatives and similar repositories for CertifyKit
Users that are interested in CertifyKit are comparing it to the libraries listed below
Sorting:
- To audit the security of read-only domain controllers☆118Updated 2 years ago
- SharpCoercer is a .NET 4.8 C# tool that leverages 16 different RPC-based coercion methods to force remote Windows hosts to authenticate t…☆53Updated 6 months ago
- Modified versions of the Cobalt Strike Process Injection Kit☆105Updated 2 years ago
- Tool to bypass LSA Protection (aka Protected Process Light)☆64Updated last year
- ☆94Updated 2 years ago
- ☆129Updated 2 years ago
- a C# implementation for a shellcode loader that capable to bypass Cortex XDR and Sophos EDR.☆90Updated 8 months ago
- A C# port from Invoke-GhostTask☆119Updated 2 years ago
- ☆92Updated last year
- Execute commands in other Sessions☆91Updated last year
- Cobalt Strike + Brute Ratel C4 Beacon Object File (BOF) Conversion of the Mockingjay Process Injection Technique☆157Updated 2 years ago
- Alternative Shellcode Execution Via Callbacks in C# with P/Invoke☆85Updated 2 years ago
- ☆102Updated 2 years ago
- Port of the EDRSilencer tool (https://github.com/netero1010/EDRSilencer) to BOF format☆31Updated last year
- ☆84Updated 2 years ago
- Secretsdump C# version only supporting local (live) operation☆55Updated 9 months ago
- A .NET Runtime for Cobalt Strike's Beacon Object Files☆90Updated last year
- ☆109Updated 11 months ago
- ☆143Updated 2 years ago
- C# implementation of Get-AADIntSyncCredentials from AADInternals, which extracts Azure AD Connect credentials to AD and Azure AD from AAD…☆44Updated 2 years ago
- Beacon Object File (BOF) to obtain Entra tokens via authcode flow.☆113Updated last week
- wspcoerce coerces a Windows computer account via SMB to an arbitrary target using MS-WSP☆132Updated 2 months ago
- Aggressor script add-in for CobaltStrike to track file uploads☆49Updated 3 years ago
- BadExclusionsNWBO is an evolution from BadExclusions to identify folder custom or undocumented exclusions on AV/EDR☆75Updated last year
- ☆74Updated last year
- ☆100Updated last year
- Attempting to Hook LSASS APIs to Retrieve Plaintext Credentials☆54Updated 8 months ago
- Code snippets to add on top of cobalt strike sleep mask to achieve patchless hook on AMSI and ETW☆85Updated 2 years ago
- Run Cobalt Strike BOFs in Brute Ratel C4!☆85Updated 9 months ago
- Lateral Movement☆125Updated 2 years ago