TokenSmith generates Entra ID access & refresh tokens on offensive engagements. It is suitable for both covert adversary simulations and penetration tests with the tokens generated working out of the box with many popular Azure post exploitation tools.
☆420Jan 23, 2025Updated last year
Alternatives and similar repositories for TokenSmith
Users that are interested in TokenSmith are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A fork of the great TokenTactics with support for CAE and token endpoint v2☆450Aug 17, 2026Updated last week
- ☆297Aug 14, 2025Updated last year
- Abusing Azure services over C2☆381Jan 20, 2026Updated 7 months ago
- A tool leveraging Kerberos tickets to get Microsoft 365 access tokens using Seamless SSO☆246Aug 25, 2024Updated 2 years ago
- Simple pure PowerShell POC to bypass Entra / Intune Compliance Conditional Access Policy☆170Nov 17, 2025Updated 9 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- A comprehensive list of usable Entra ID first-party clients with pre-consented Microsoft Graph scopes, in a simple YAML-file explorable w…☆166Mar 20, 2026Updated 5 months ago
- A BloodHound collector for Microsoft Configuration Manager☆406Jul 7, 2025Updated last year
- Azure Post Exploitation Framework☆248Oct 27, 2025Updated 10 months ago
- Initial Access and Post-Exploitation Tool for Entra ID and M365 with a browser-based GUI☆1,388Updated this week
- ☆128Jun 17, 2025Updated last year
- ☆142Nov 17, 2025Updated 9 months ago
- Local SYSTEM auth trigger for relaying☆174Jul 22, 2025Updated last year
- A pure PowerShell solution for Entra OAuth authentication, enabling easy retrieval of access and refresh tokens☆151Apr 9, 2026Updated 4 months ago
- A Post-exploitation Toolset for Interacting with the Microsoft Graph API☆1,334Apr 9, 2026Updated 4 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Serverless AITM Simulation Framework for Entra ID and M365☆242Dec 29, 2025Updated 8 months ago
- ☆232Aug 18, 2026Updated last week
- ☆240Oct 8, 2024Updated last year
- A python tool to map the access rights of network shares into a BloodHound OpenGraphs easily☆313May 11, 2026Updated 3 months ago
- M365/Azure adversary simulation tool that generates realistic attack telemetry to help blue teams improve their detection and response ca…☆330Updated this week
- A C# utility for interacting with SCOM☆99Dec 2, 2025Updated 8 months ago
- Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking☆461Jun 27, 2025Updated last year
- .NET Post-Exploitation Utility for Abusing Strong Explicit Certificate Mappings in ADCS☆154Feb 10, 2025Updated last year
- Local SYSTEM auth trigger for relaying - X☆161Jul 23, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Windows protocol library, including SMB and RPC implementations, among others.☆828Aug 18, 2026Updated last week
- Azure JWT Token Manipulation Toolset☆737Dec 6, 2024Updated last year
- TokenCert☆105Nov 15, 2024Updated last year
- tool for requesting Entra ID's P2P certificate and authenticating to a remote Entra joinned devices with it☆135Aug 23, 2025Updated last year
- psexecsvc - a python implementation of PSExec's native service implementation☆314Mar 24, 2026Updated 5 months ago
- Remote Kerberos Relay made easy! Advanced Kerberos Relay Framework☆649May 8, 2025Updated last year
- SOCKS5 proxy tool that uses Azure Storage services as a means of communication.☆365Aug 15, 2026Updated 2 weeks ago
- Lateral movement with DCOM DLL hijacking☆183Jul 4, 2025Updated last year
- SOAPy is a Proof of Concept (PoC) tool for conducting offensive interaction with Active Directory Web Services (ADWS) through a SOCKS5 pr…☆214Aug 13, 2026Updated 2 weeks ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- DCOM Lateral movement POC abusing the IMsiServer interface - uploads and executes a payload remotely☆396Dec 13, 2024Updated last year
- The DCERPC only printerbug.py version☆234Oct 30, 2025Updated 10 months ago
- Generate and Manage KeyCredentialLinks☆258Jul 17, 2026Updated last month
- A Python POC for CRED1 over SOCKS5☆172Oct 5, 2024Updated last year
- ☆194Oct 21, 2025Updated 10 months ago
- ☆657Jul 28, 2026Updated last month
- TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts☆1,399Mar 9, 2026Updated 5 months ago