TokenSmith generates Entra ID access & refresh tokens on offensive engagements. It is suitable for both covert adversary simulations and penetration tests with the tokens generated working out of the box with many popular Azure post exploitation tools.
☆414Jan 23, 2025Updated last year
Alternatives and similar repositories for TokenSmith
Users that are interested in TokenSmith are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Abusing Azure services over C2☆377Jan 20, 2026Updated 6 months ago
- Simple pure PowerShell POC to bypass Entra / Intune Compliance Conditional Access Policy☆169Nov 17, 2025Updated 8 months ago
- Azure Post Exploitation Framework☆250Oct 27, 2025Updated 8 months ago
- A BloodHound collector for Microsoft Configuration Manager☆403Jul 7, 2025Updated last year
- ☆294Aug 14, 2025Updated 11 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- ☆141Nov 17, 2025Updated 8 months ago
- A fork of the great TokenTactics with support for CAE and token endpoint v2☆433Jul 13, 2026Updated last week
- Local SYSTEM auth trigger for relaying☆173Jul 22, 2025Updated 11 months ago
- ☆239Oct 8, 2024Updated last year
- .NET Post-Exploitation Utility for Abusing Strong Explicit Certificate Mappings in ADCS☆153Feb 10, 2025Updated last year
- M365/Azure adversary simulation tool that generates realistic attack telemetry to help blue teams improve their detection and response ca…☆330Oct 12, 2025Updated 9 months ago
- A comprehensive list of usable Entra ID first-party clients with pre-consented Microsoft Graph scopes, in a simple YAML-file explorable w…☆164Mar 20, 2026Updated 4 months ago
- Initial Access and Post-Exploitation Tool for Entra ID and M365 with a browser-based GUI☆1,349Jun 9, 2026Updated last month
- A Post-exploitation Toolset for Interacting with the Microsoft Graph API☆1,314Apr 9, 2026Updated 3 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A tool leveraging Kerberos tickets to get Microsoft 365 access tokens using Seamless SSO☆248Aug 25, 2024Updated last year
- DCOM Lateral movement POC abusing the IMsiServer interface - uploads and executes a payload remotely☆386Dec 13, 2024Updated last year
- ☆128Jun 17, 2025Updated last year
- ☆165Jan 27, 2025Updated last year
- Find potential DLL Sideloads on your windows computer☆222Jan 12, 2025Updated last year
- TokenCert☆105Nov 15, 2024Updated last year
- Azure JWT Token Manipulation Toolset☆736Dec 6, 2024Updated last year
- ☆229Jul 9, 2026Updated last week
- ☆52Jun 12, 2026Updated last month
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- SCCMSecrets.py aims at exploiting SCCM policies distribution for credentials harvesting, initial access and lateral movement.☆273Nov 22, 2025Updated 7 months ago
- Proof of Concept (PoC) .NET tool for remotely killing EDR with WDAC☆437Sep 29, 2025Updated 9 months ago
- Remote Kerberos Relay made easy! Advanced Kerberos Relay Framework☆650May 8, 2025Updated last year
- Azure DevOps Services Attack Toolkit☆318Mar 15, 2025Updated last year
- BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions☆360Nov 19, 2024Updated last year
- A Python POC for CRED1 over SOCKS5☆172Oct 5, 2024Updated last year
- This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…☆219Oct 19, 2024Updated last year
- Disconnected RSAT - A method of running Group Policy Manager, Certificate Authority and Certificate Templates MMC snap-ins from non-domai…☆311Mar 28, 2026Updated 3 months ago
- Research into Undocumented Behavior of Azure AD Refresh Tokens☆367Feb 23, 2024Updated 2 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking☆444Jun 27, 2025Updated last year
- tool for requesting Entra ID's P2P certificate and authenticating to a remote Entra joinned devices with it☆135Aug 23, 2025Updated 10 months ago
- Generate and Manage KeyCredentialLinks☆257Updated this week
- Weaponizing DCOM for NTLM Authentication Coercions☆274Jul 1, 2025Updated last year
- SoaPy is a Proof of Concept (PoC) tool for conducting offensive interaction with Active Directory Web Services (ADWS) from Linux hosts.☆267Feb 21, 2025Updated last year
- A pure PowerShell solution for Entra OAuth authentication, enabling easy retrieval of access and refresh tokens☆149Apr 9, 2026Updated 3 months ago
- A collection of Azure AD/Entra tools for offensive and defensive security purposes☆2,672May 21, 2026Updated last month