TokenSmith generates Entra ID access & refresh tokens on offensive engagements. It is suitable for both covert adversary simulations and penetration tests with the tokens generated working out of the box with many popular Azure post exploitation tools.
☆423Jan 23, 2025Updated last year
Alternatives and similar repositories for TokenSmith
Users that are interested in TokenSmith are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A fork of the great TokenTactics with support for CAE and token endpoint v2☆470Sep 13, 2026Updated last month
- Simple pure PowerShell POC to bypass Entra / Intune Compliance Conditional Access Policy☆170Nov 17, 2025Updated 11 months ago
- ☆304Aug 14, 2025Updated last year
- Abusing Azure services over C2☆384Jan 20, 2026Updated 9 months ago
- Azure Post Exploitation Framework☆247Oct 27, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A tool leveraging Kerberos tickets to get Microsoft 365 access tokens using Seamless SSO☆249Aug 25, 2024Updated 2 years ago
- A BloodHound collector for Microsoft Configuration Manager☆404Jul 7, 2025Updated last year
- A comprehensive list of usable Entra ID first-party clients with pre-consented Microsoft Graph scopes, in a simple YAML-file explorable w…☆170Mar 20, 2026Updated 7 months ago
- A Post-exploitation Toolset for Interacting with the Microsoft Graph API☆1,350Apr 9, 2026Updated 6 months ago
- ☆141Nov 17, 2025Updated 11 months ago
- Initial Access and Post-Exploitation Tool for Entra ID and M365 with a browser-based GUI☆1,413Aug 26, 2026Updated 2 months ago
- ☆126Jun 17, 2025Updated last year
- Azure JWT Token Manipulation Toolset☆737Dec 6, 2024Updated last year
- Local SYSTEM auth trigger for relaying☆173Jul 22, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- .NET Post-Exploitation Utility for Abusing Strong Explicit Certificate Mappings in ADCS☆160Feb 10, 2025Updated last year
- A collection of Azure AD/Entra tools for offensive and defensive security purposes☆2,749Oct 22, 2026Updated last week
- Serverless AITM Simulation Framework for Entra ID and M365☆243Dec 29, 2025Updated 10 months ago
- M365/Azure adversary simulation tool that generates realistic attack telemetry to help blue teams improve their detection and response ca…☆331Sep 2, 2026Updated last month
- A C# utility for interacting with SCOM☆101Dec 2, 2025Updated 10 months ago
- TokenCert☆105Nov 15, 2024Updated last year
- A pure PowerShell solution for Entra OAuth authentication, enabling easy retrieval of access and refresh tokens☆154Apr 9, 2026Updated 6 months ago
- Local SYSTEM auth trigger for relaying - X☆165Jul 23, 2025Updated last year
- A python tool to map the access rights of network shares into a BloodHound OpenGraphs easily☆315Aug 30, 2026Updated last month
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- The GPOddity project, aiming at automating GPO attack vectors through NTLM relaying (and more).☆385Aug 28, 2026Updated 2 months ago
- TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts☆1,411Mar 9, 2026Updated 7 months ago
- Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking☆468Jun 27, 2025Updated last year
- ☆244Sep 21, 2026Updated last month
- DCOM Lateral movement POC abusing the IMsiServer interface - uploads and executes a payload remotely☆397Dec 13, 2024Updated last year
- Remote Kerberos Relay made easy! Advanced Kerberos Relay Framework☆650May 8, 2025Updated last year
- Research into Undocumented Behavior of Azure AD Refresh Tokens☆375Feb 23, 2024Updated 2 years ago
- Windows protocol library, including SMB and RPC implementations, among others.☆840Oct 5, 2026Updated 3 weeks ago
- Proof of Concept (PoC) .NET tool for remotely killing EDR with WDAC☆441Sep 29, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- SOCKS5 proxy tool that uses Azure Storage services as a means of communication.☆381Updated this week
- Weaponizing DCOM for NTLM Authentication Coercions☆273Jul 1, 2025Updated last year
- BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions☆363Nov 19, 2024Updated last year
- tool for requesting Entra ID's P2P certificate and authenticating to a remote Entra joinned devices with it☆135Aug 23, 2025Updated last year
- SOAPy is a Proof of Concept (PoC) tool for conducting offensive interaction with Active Directory Web Services (ADWS) through a SOCKS5 pr…☆215Aug 13, 2026Updated 2 months ago
- ☆240Oct 8, 2024Updated 2 years ago
- SCCMHunter is a post-ex tool built to streamline identifying, profiling, and attacking SCCM related assets in an Active Directory domain.…☆959Updated this week