TokenSmith generates Entra ID access & refresh tokens on offensive engagements. It is suitable for both covert adversary simulations and penetration tests with the tokens generated working out of the box with many popular Azure post exploitation tools.
☆421Jan 23, 2025Updated last year
Alternatives and similar repositories for TokenSmith
Users that are interested in TokenSmith are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A fork of the great TokenTactics with support for CAE and token endpoint v2☆464Sep 13, 2026Updated 3 weeks ago
- ☆299Aug 14, 2025Updated last year
- Abusing Azure services over C2☆382Jan 20, 2026Updated 8 months ago
- A tool leveraging Kerberos tickets to get Microsoft 365 access tokens using Seamless SSO☆249Aug 25, 2024Updated 2 years ago
- Simple pure PowerShell POC to bypass Entra / Intune Compliance Conditional Access Policy☆170Nov 17, 2025Updated 10 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A comprehensive list of usable Entra ID first-party clients with pre-consented Microsoft Graph scopes, in a simple YAML-file explorable w…☆169Mar 20, 2026Updated 6 months ago
- A BloodHound collector for Microsoft Configuration Manager☆402Jul 7, 2025Updated last year
- Azure Post Exploitation Framework☆247Oct 27, 2025Updated 11 months ago
- Initial Access and Post-Exploitation Tool for Entra ID and M365 with a browser-based GUI☆1,404Aug 26, 2026Updated last month
- ☆126Jun 17, 2025Updated last year
- ☆140Nov 17, 2025Updated 10 months ago
- Local SYSTEM auth trigger for relaying☆173Jul 22, 2025Updated last year
- A pure PowerShell solution for Entra OAuth authentication, enabling easy retrieval of access and refresh tokens☆151Apr 9, 2026Updated 6 months ago
- A Post-exploitation Toolset for Interacting with the Microsoft Graph API☆1,346Apr 9, 2026Updated 6 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Serverless AITM Simulation Framework for Entra ID and M365☆242Dec 29, 2025Updated 9 months ago
- ☆240Oct 8, 2024Updated 2 years ago
- ☆240Sep 21, 2026Updated 2 weeks ago
- A python tool to map the access rights of network shares into a BloodHound OpenGraphs easily☆313Aug 30, 2026Updated last month
- Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking☆465Jun 27, 2025Updated last year
- .NET Post-Exploitation Utility for Abusing Strong Explicit Certificate Mappings in ADCS☆160Feb 10, 2025Updated last year
- Local SYSTEM auth trigger for relaying - X☆160Jul 23, 2025Updated last year
- M365/Azure adversary simulation tool that generates realistic attack telemetry to help blue teams improve their detection and response ca…☆330Sep 2, 2026Updated last month
- A C# utility for interacting with SCOM☆99Dec 2, 2025Updated 10 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Windows protocol library, including SMB and RPC implementations, among others.☆839Updated this week
- Azure JWT Token Manipulation Toolset☆734Dec 6, 2024Updated last year
- TokenCert☆104Nov 15, 2024Updated last year
- tool for requesting Entra ID's P2P certificate and authenticating to a remote Entra joinned devices with it☆135Aug 23, 2025Updated last year
- Lateral movement with DCOM DLL hijacking☆184Jul 4, 2025Updated last year
- Remote Kerberos Relay made easy! Advanced Kerberos Relay Framework☆651May 8, 2025Updated last year
- psexecsvc - a python implementation of PSExec's native service implementation☆315Mar 24, 2026Updated 6 months ago
- DCOM Lateral movement POC abusing the IMsiServer interface - uploads and executes a payload remotely☆395Dec 13, 2024Updated last year
- SOCKS5 proxy tool that uses Azure Storage services as a means of communication.☆365Updated this week
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- The DCERPC only printerbug.py version☆233Oct 30, 2025Updated 11 months ago
- Generate and Manage KeyCredentialLinks☆258Oct 2, 2026Updated last week
- A Python POC for CRED1 over SOCKS5☆173Oct 5, 2024Updated 2 years ago
- BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions☆360Nov 19, 2024Updated last year
- SOAPy is a Proof of Concept (PoC) tool for conducting offensive interaction with Active Directory Web Services (ADWS) through a SOCKS5 pr…☆217Aug 13, 2026Updated last month
- Red Team scripts to find the permissions assigned to a compromised principal in AWS, GCP, Azure and Kubernetes.☆688Updated this week
- TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts☆1,411Mar 9, 2026Updated 7 months ago