Make or Steal a Token
☆10Mar 20, 2024Updated 2 years ago
Alternatives and similar repositories for Token-Impersonation
Users that are interested in Token-Impersonation are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Quick and dirty PowerShell script to abuse the overly permissive capabilities of the SYSTEM user in a child domain on the Public Key Serv…☆29Jul 25, 2023Updated 3 years ago
- DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will auto…☆15Apr 2, 2026Updated 6 months ago
- Enumerate the Domain for Readable and Writable Shares☆24Updated this week
- Cheatsheet for Altered Security's CESP ADCS course☆19Nov 15, 2023Updated 2 years ago
- Retrieve and display information about active user sessions on remote computers. No admin privileges required.☆211Aug 12, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- PowerShell scripts that audit Active Directory and produce interactive, offline HTML reports: topology, DCs, accounts, GPOs, DNS, trusts,…☆92Oct 12, 2026Updated last week
- ☆39Sep 25, 2026Updated 3 weeks ago
- A Purple Team lab simulating Active Directory attacks (Kerberoasting, BloodHound, lateral movement) and implementing defensive hardening …☆37Oct 7, 2026Updated last week
- Group3r but in Python☆63Oct 11, 2026Updated last week
- PowerShell script to generate ShellCode in various formats☆45Sep 25, 2024Updated 2 years ago
- Modified BloodHound.py CE ingestor for red team use. Obfuscates LDAP through ldapx, paces LDAP searches and host RPC, and resumes a stopp…☆88Oct 10, 2026Updated last week
- Pure PowerShell port of PassTheCert tool to authenticate to an LDAP/S server with a certificate through Schannel☆18May 22, 2026Updated 4 months ago
- ☆49Feb 26, 2026Updated 7 months ago
- ☆19Dec 25, 2025Updated 9 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Extracts Azure authentication tokens from PowerShell process minidumps.☆25May 20, 2023Updated 3 years ago
- Tamper Active Directory user attributes to collect their hashes with MS-SNTP☆72Jan 21, 2025Updated last year
- Proof of Concept in Go from Secureworks' research on Azure Active Directory Brute-Force Attacks. Inspired by @treebuilder's POC on PowerS…☆14Feb 23, 2022Updated 4 years ago
- Azur3Alph4 is a PowerShell module that automates red-team tasks for ops on objective. This module situates in a post-breach (RCE achieved…☆63Aug 11, 2021Updated 5 years ago
- Check the Domain for Local Admin Access☆25Feb 20, 2025Updated last year
- GetSystem-LCI is a PowerShell script to escalate privileges from Administrator to NT AUTHORITY\SYSTEM by abusing LanguageComponentsInstal…☆35Nov 24, 2024Updated last year
- .net tool that uses WMI queries to enumerate active sessions and accounts configured to run services on remote systems☆36Dec 9, 2019Updated 6 years ago
- Sh3ller is a lightweight C2 framework in its simplest form.☆33Sep 5, 2025Updated last year
- A cross platform tool to work with keytab files used by Kerberos to store authentication information.☆13Oct 9, 2026Updated last week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Interactive Shell and Command Execution over Named-Pipes (SMB) for Fileless lateral movement☆191May 19, 2025Updated last year
- Nim Shellcode Injector☆15Jan 24, 2021Updated 5 years ago
- Drop any Windows DPAPI artifact and it identifies the format and the exact master key it needs, then decrypts once you supply the key. Of…☆30Sep 23, 2026Updated 3 weeks ago
- ☆15Sep 26, 2023Updated 3 years ago
- Dynamic Device Phishing tool that creates a new code only when user clicks on link or email is sent.☆25Jul 24, 2026Updated 2 months ago
- Pure PowerShell port of PassTheCert tool to authenticate to an LDAP/S server with a certificate through Schannel☆65Apr 13, 2025Updated last year
- ☆14Aug 26, 2021Updated 5 years ago
- POC tool for ResetNightmare (CVE-2026-27912)☆224Aug 20, 2026Updated 2 months ago
- ☆78Jun 17, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A simple to use single-include Windows API resolver☆22Jul 9, 2024Updated 2 years ago
- Dump Lsass Memory Using a Reflective Dll☆14Feb 4, 2022Updated 4 years ago
- Helps defenders find their WSUS configurations in the wake of CVE-2025-59287☆46Oct 28, 2025Updated 11 months ago
- Collection of self-made Red Team tools that have come in handy☆12Aug 25, 2024Updated 2 years ago
- ☆16Jan 9, 2025Updated last year
- Tool for obtaining information about PPL processes☆16Feb 12, 2024Updated 2 years ago
- Impersonate Windows tokens in Nim☆24Aug 4, 2025Updated last year