TokenSmith generates Entra ID access & refresh tokens on offensive engagements. It is suitable for both covert adversary simulations and penetration tests with the tokens generated working out of the box with many popular Azure post exploitation tools.
☆422Jan 23, 2025Updated last year
Alternatives and similar repositories for TokenSmith
Users that are interested in TokenSmith are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A fork of the great TokenTactics with support for CAE and token endpoint v2☆458Updated this week
- ☆297Aug 14, 2025Updated last year
- Abusing Azure services over C2☆382Jan 20, 2026Updated 7 months ago
- A tool leveraging Kerberos tickets to get Microsoft 365 access tokens using Seamless SSO☆249Aug 25, 2024Updated 2 years ago
- Simple pure PowerShell POC to bypass Entra / Intune Compliance Conditional Access Policy☆170Nov 17, 2025Updated 10 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A comprehensive list of usable Entra ID first-party clients with pre-consented Microsoft Graph scopes, in a simple YAML-file explorable w…☆168Mar 20, 2026Updated 5 months ago
- A BloodHound collector for Microsoft Configuration Manager☆403Jul 7, 2025Updated last year
- Azure Post Exploitation Framework☆248Oct 27, 2025Updated 10 months ago
- Initial Access and Post-Exploitation Tool for Entra ID and M365 with a browser-based GUI☆1,397Aug 26, 2026Updated 3 weeks ago
- ☆128Jun 17, 2025Updated last year
- ☆141Nov 17, 2025Updated 10 months ago
- Local SYSTEM auth trigger for relaying☆173Jul 22, 2025Updated last year
- A pure PowerShell solution for Entra OAuth authentication, enabling easy retrieval of access and refresh tokens☆151Apr 9, 2026Updated 5 months ago
- A Post-exploitation Toolset for Interacting with the Microsoft Graph API☆1,344Apr 9, 2026Updated 5 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Serverless AITM Simulation Framework for Entra ID and M365☆242Dec 29, 2025Updated 8 months ago
- ☆241Oct 8, 2024Updated last year
- ☆238Aug 18, 2026Updated last month
- A python tool to map the access rights of network shares into a BloodHound OpenGraphs easily☆313Aug 30, 2026Updated 2 weeks ago
- Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking☆463Jun 27, 2025Updated last year
- .NET Post-Exploitation Utility for Abusing Strong Explicit Certificate Mappings in ADCS☆159Feb 10, 2025Updated last year
- Local SYSTEM auth trigger for relaying - X☆160Jul 23, 2025Updated last year
- M365/Azure adversary simulation tool that generates realistic attack telemetry to help blue teams improve their detection and response ca…☆330Sep 2, 2026Updated 2 weeks ago
- A C# utility for interacting with SCOM☆97Dec 2, 2025Updated 9 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Windows protocol library, including SMB and RPC implementations, among others.☆833Sep 11, 2026Updated last week
- Azure JWT Token Manipulation Toolset☆735Dec 6, 2024Updated last year
- TokenCert☆104Nov 15, 2024Updated last year
- tool for requesting Entra ID's P2P certificate and authenticating to a remote Entra joinned devices with it☆135Aug 23, 2025Updated last year
- Lateral movement with DCOM DLL hijacking☆183Jul 4, 2025Updated last year
- Remote Kerberos Relay made easy! Advanced Kerberos Relay Framework☆652May 8, 2025Updated last year
- psexecsvc - a python implementation of PSExec's native service implementation☆314Mar 24, 2026Updated 5 months ago
- DCOM Lateral movement POC abusing the IMsiServer interface - uploads and executes a payload remotely☆396Dec 13, 2024Updated last year
- SOCKS5 proxy tool that uses Azure Storage services as a means of communication.☆364Aug 15, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- The DCERPC only printerbug.py version☆234Oct 30, 2025Updated 10 months ago
- Generate and Manage KeyCredentialLinks☆256Jul 17, 2026Updated 2 months ago
- A Python POC for CRED1 over SOCKS5☆172Oct 5, 2024Updated last year
- BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions☆361Nov 19, 2024Updated last year
- SOAPy is a Proof of Concept (PoC) tool for conducting offensive interaction with Active Directory Web Services (ADWS) through a SOCKS5 pr…☆217Aug 13, 2026Updated last month
- ☆659Updated this week
- TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts☆1,404Mar 9, 2026Updated 6 months ago