C# implementation of Get-AADIntSyncCredentials from AADInternals, which extracts Azure AD Connect credentials to AD and Azure AD from AAD connect database.
☆50Jun 24, 2023Updated 3 years ago
Alternatives and similar repositories for DumpAADSyncCreds
Users that are interested in DumpAADSyncCreds are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- SACL Scanner is a tool designed to scan and analyze SACLs.☆53Feb 13, 2025Updated last year
- Tool to perform GCP Domain Wide Delegation abuse and access Gmail and Drive data☆72Oct 22, 2025Updated last year
- A tool leveraging Kerberos tickets to get Microsoft 365 access tokens using Seamless SSO☆249Aug 25, 2024Updated 2 years ago
- ☆83Dec 24, 2021Updated 4 years ago
- impersonate trustedinstaller by fiddling with tokens☆13Aug 30, 2021Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆40Sep 25, 2026Updated last month
- modified mssqlclient from impacket to extract policies from the SCCM database☆52Feb 24, 2026Updated 8 months ago
- ☆24Oct 21, 2021Updated 5 years ago
- Beacon Object File (BOF) for identifying dependent child services of a given parent.☆19Jun 20, 2025Updated last year
- SharpDPAPI ported to Cobalt Strike BOFs — 19 self-contained BOFs for DPAPI credential triage☆18Feb 24, 2026Updated 8 months ago
- ☆13Jun 8, 2026Updated 4 months ago
- Dumping LSASS with a duplicated handle from custom LSA plugin☆207Feb 23, 2022Updated 4 years ago
- ☆159Dec 14, 2023Updated 2 years ago
- Abuse Azure API permissions for red teaming☆72Jan 24, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- VisualStudio port of https://github.com/guervild/BOFs/tree/dev/SilentLsassDump☆23Jul 6, 2023Updated 3 years ago
- LSASS memory dumper using direct system calls and API unhooking.☆22Nov 24, 2020Updated 5 years ago
- Modified version of Pypykatz to print encrypted credentials☆55Dec 26, 2022Updated 3 years ago
- Windows Thread Pool Injection Havoc Implementation☆35Mar 23, 2024Updated 2 years ago
- A BOF that's a BOF Loader and more☆212Apr 6, 2026Updated 6 months ago
- A Combination LSASS Dumper and LSASS Parser. All Credit goes to @slyd0g and @cube0x0.☆148Nov 21, 2021Updated 4 years ago
- ☆62May 31, 2024Updated 2 years ago
- Async PICO Hub is a work-in-progress framework to extend Cobalt Strike with custom event monitoring and in-process Asynchronous BOFs☆28Jun 4, 2026Updated 4 months ago
- BOF内存运行exe☆31Jun 19, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- MS-FSRVP coercion abuse PoC☆304Dec 30, 2021Updated 4 years ago
- Tool to enumerate unregistered reply URLs for single and multitenant apps in Azure☆17Jan 23, 2025Updated last year
- Cobalt Strike BOF☆58Dec 10, 2025Updated 10 months ago
- NTLM HTTP relay tool with SOCKS proxy for browser session hijacking☆192Apr 6, 2026Updated 6 months ago
- A simple OAuth App designed to capture OAuth tokens when users authenticate through GitHub OAuth flow.☆28Apr 20, 2026Updated 6 months ago
- This C# tool sprays for admin access over the entire domain☆90Dec 7, 2025Updated 10 months ago
- A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.☆818Jun 16, 2026Updated 4 months ago
- C# Data Collector for BloodHound with CobaltStrike integration (BOF.NET)☆61Apr 13, 2023Updated 3 years ago
- Hides processes from the windows task manager using IAT hooking.☆22Mar 30, 2021Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Evasion kit for Cobalt Strike☆16Aug 13, 2026Updated 2 months ago
- cmd2shellcode☆78May 6, 2021Updated 5 years ago
- Cobalt Strike Beacon Object File (BOF) that uses RegConnectRegistryA + RegOpenKeyExA API to dump registry hives on remote computer☆18Mar 4, 2023Updated 3 years ago
- Windows 7/2008 R2 EoP☆12Feb 12, 2021Updated 5 years ago
- Beacon Object File (BOF) to obtain Entra tokens via authcode flow.☆143Jan 17, 2026Updated 9 months ago
- GolenGMSA tool for working with GMSA passwords☆191May 14, 2026Updated 5 months ago
- DFSCoerce exe revisited version with custom authentication☆43Jan 13, 2024Updated 2 years ago