Malcrove / SeamlessPassLinks
A tool leveraging Kerberos tickets to get Microsoft 365 access tokens using Seamless SSO
☆188Updated last year
Alternatives and similar repositories for SeamlessPass
Users that are interested in SeamlessPass are comparing it to the libraries listed below
Sorting:
- Azure Post Exploitation Framework☆213Updated last week
- SCCMSecrets.py aims at exploiting SCCM policies distribution for credentials harvesting, initial access and lateral movement.☆241Updated 3 months ago
- Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) shares via HTTP(s)☆192Updated 11 months ago
- SoaPy is a Proof of Concept (PoC) tool for conducting offensive interaction with Active Directory Web Services (ADWS) from Linux hosts.☆241Updated 6 months ago
- Automatically run and populate a new instance of BH CE☆100Updated last month
- ☆195Updated 3 months ago
- Weaponizing DCOM for NTLM Authentication Coercions☆265Updated 2 months ago
- ☆114Updated 2 months ago
- ☆179Updated 9 months ago
- Modular cross-platform Microsoft Graph API (Entra, o365, and Intune) enumeration and exploitation toolkit☆150Updated 9 months ago
- gpoParser is a tool designed to extract and analyze configurations applied through Group Policy Objects (GPOs) in an Active Directory env…☆272Updated last week
- ☆191Updated 2 weeks ago
- Generate and Manage KeyCredentialLinks☆164Updated last month
- A BloodHound collector for Microsoft Configuration Manager☆345Updated 2 months ago
- Parses Snaffler output file and generate beautified outputs.☆107Updated 7 months ago
- ☆211Updated 3 months ago
- Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel☆296Updated last month
- Tool for Active Directory Certificate Services enumeration and abuse☆164Updated 4 months ago
- ☆70Updated last month
- Abusing Azure services over C2☆352Updated 3 months ago
- Disconnected RSAT - A method of running Group Policy Manager, Certificate Authority and Certificate Templates MMC snap-ins from non-domai…☆253Updated 8 months ago
- Hybrid AD utilities for ROADtools☆89Updated 3 months ago
- This is a novel technique that leverages the well-known Device Code phishing approach. It dynamically initiates the flow when the victim …☆171Updated 4 months ago
- Retrieve and display information about active user sessions on remote computers. No admin privileges required.☆192Updated last year
- ☆224Updated 11 months ago
- PowerShell collector for adding MSSQL attack paths to BloodHound with OpenGraph☆230Updated last week
- ☆212Updated last year
- ☆152Updated 5 months ago
- SharpSuccessor is a .NET Proof of Concept (POC) for fully weaponizing Yuval Gordon’s (@YuG0rd) BadSuccessor attack from Akamai.☆335Updated 3 months ago
- ☆186Updated 9 months ago