Active Directory certificate abuse
☆43Oct 9, 2022Updated 4 years ago
Alternatives and similar repositories for CertifyKit
Users that are interested in CertifyKit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Cheatsheet for Altered Security's CESP ADCS course☆20Nov 15, 2023Updated 2 years ago
- echow is a small tool that generates echo commands to write binary files. echow 是一个生成 echo 命令来写入二进制文件的小工具。☆12Dec 11, 2022Updated 3 years ago
- Dump Teams conversations☆18Jun 9, 2021Updated 5 years ago
- Beacon Object File (BOF) to retrieve and decrypt the the LAPSv2 password from the Windows Active Directory and Microsoft Azure/Entra Acti…☆21Oct 24, 2025Updated last year
- ☆45Oct 16, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- UAC Bypass using RequestTrace scheduled task☆29Jul 23, 2026Updated 3 months ago
- Remote process shellcode injection with interactive output via named pipes☆52Jan 10, 2024Updated 2 years ago
- Process hollowing injection technique for Red Team operations☆19Sep 18, 2023Updated 3 years ago
- TokenCert☆105Nov 15, 2024Updated last year
- Tool to aid in dumping LSASS process remotely☆43Sep 23, 2025Updated last year
- Dump lsass using only NTAPI functions by hand-crafting Minidump files (without MiniDumpWriteDump!!!)☆750Aug 17, 2026Updated 2 months ago
- Tooling related to the WAM Bam - Recovering Web Tokens From Office blog post☆133Jan 14, 2023Updated 3 years ago
- The Totally Legit Authentication Dialog☆12Sep 5, 2023Updated 3 years ago
- Installing wazuh SIEM Unified XDR and SIEM protection☆34Jun 3, 2025Updated last year
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Bypass Credential Guard by patching WDigest.dll using only NTAPI functions☆270Apr 8, 2025Updated last year
- This script analyzes the DCSync output file from several tools (such as Mimikatz, Secretsdump and SharpKatz...)☆73Mar 17, 2025Updated last year
- The program uses the Windows API functions to traverse through directories and locate DLL files with RWX section☆112Jul 15, 2023Updated 3 years ago
- DCOM Lateral movement POC abusing the IMsiServer interface - uploads and executes a payload remotely☆397Dec 13, 2024Updated last year
- ☆121Oct 9, 2023Updated 3 years ago
- 用Go开发的Java字节码解析器，和“javap”命令作用一致 Java class file parser plays the same role as "javap"☆18Oct 17, 2017Updated 9 years ago
- Rust implementation, creating a scheduled task programmatically with user logon trigger.☆47Jun 10, 2025Updated last year
- Purple Team Dropper generator using open source templates.☆18May 23, 2024Updated 2 years ago
- Remote Kerberos Relay made easy! Advanced Kerberos Relay Framework☆652May 8, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- custom impacket mssqlclient☆26Sep 16, 2023Updated 3 years ago
- early cascade injection PoC based on Outflanks blog post☆242Nov 7, 2024Updated last year
- To audit the security of read-only domain controllers☆118Nov 27, 2023Updated 2 years ago
- A Stealthy Lsass Dumper - can abuse ProcExp152.sys driver to dump PPL Lsass, no dbghelp.lib calls.☆326Jan 31, 2023Updated 3 years ago
- Active Directory reconnaissance and exploitation for Red Teams via the Active Directory Web Services (ADWS).☆607Mar 19, 2024Updated 2 years ago
- This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…☆217Oct 19, 2024Updated 2 years ago
- e(X)tensiable (Rust) Malware Toolkit: (Soon!) Full Featured Rust C2 Framework with Awesome Features!☆28Oct 2, 2026Updated last month
- A C++ proof of concept demonstrating the exploitation of Windows Protected Process Light (PPL) by leveraging COM-to-.NET redirection and …☆337Mar 6, 2025Updated last year
- Implant drop-in for EDR testing☆145Nov 15, 2023Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- An Ansible collection that installs an SCCM deployment with optional configurations.☆109Dec 8, 2025Updated 10 months ago
- ☆247May 5, 2024Updated 2 years ago
- This technique leverages PowerShell's .NET interop layer and COM automation to achieve stealthy command execution by abusing implicit typ…☆54May 16, 2025Updated last year
- DPAPI looting in Python☆576Oct 27, 2026Updated last week
- all random stuff that dont warrant a seperate repo☆12Sep 2, 2022Updated 4 years ago
- Unbind port 445/tcp on Windows☆14Jul 11, 2025Updated last year
- AV/EDR killer leveraging vulnerable kernel drivers☆504Nov 28, 2023Updated 2 years ago