Pass-the-Passkey Family of Attacks
☆234Sep 14, 2026Updated last month
Alternatives and similar repositories for pass-the-passkey
Users that are interested in pass-the-passkey are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Ask the Web Account Manager (WAM) for Entra ID tokens☆167Sep 11, 2026Updated last month
- Recover NT hashes from NetNTLMv1 responses using local WebGPU computation and local/remote table lookup☆151Oct 7, 2026Updated 3 weeks ago
- ANIMO Azure Network Intel & Mission Ops a C2 based on Azure/Entra assessments☆95Sep 16, 2026Updated last month
- POC tool for ResetNightmare (CVE-2026-27912)☆225Aug 20, 2026Updated 2 months ago
- Tool to authenticate to an LDAP/S server with a certificate through Schannel written in Rust. 🦀☆77Oct 10, 2026Updated 3 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A community maintained repository of Beacon Object Files (BOFs) for red team operations, research, and education. Our goal is to provide …☆34Aug 8, 2026Updated 2 months ago
- A collection of BOF-PE's that allow running tailscale from memory☆141Aug 27, 2026Updated 2 months ago
- Authenticode signature manipulation toolkit for Red Team operations and security research. Covers signature stealing, metadata cloning, S…☆144Aug 13, 2026Updated 2 months ago
- Repository for various Beacon Object Files (BOFs)☆185Oct 22, 2026Updated 2 weeks ago
- A python tool to map the access rights of network shares into a BloodHound OpenGraphs easily☆316Aug 30, 2026Updated 2 months ago
- BOF to impersonate TrustedInstaller via DISM API trigger and thread impersonation☆136Mar 27, 2026Updated 7 months ago
- Runtime Credential Guard deactivation via \\LSA_ISO_DISABLE_CREDENTIAL_GUARD + LSASS NT hash extraction (Win11 24H2)☆108Oct 27, 2026Updated last week
- InfraGuard is a Command & Control Redirection Proxy and Manager which protects your Red Team Infrastructure against threat attribution☆334Oct 22, 2026Updated 2 weeks ago
- Windows Kernel-Mode Shellcode Development Framework (WKMSDF)☆91Aug 1, 2026Updated 3 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Snaffler in Python☆123Oct 1, 2026Updated last month
- NTLM HTTP relay tool with SOCKS proxy for browser session hijacking☆193Updated this week
- This repo contains the results of an internal re-write of impacket I undertook at my current company. It contains some of the IoCs found …☆360Sep 7, 2026Updated last month
- Attack path mapping for Active Directory, ADCS, SCCM, and MSSQL using BloodHound CE + OpenGraph data.☆247Aug 9, 2026Updated 2 months ago
- Azure RedOps is a offensive security toolkit for assessing the security posture of Microsoft Entra ID☆187Oct 18, 2026Updated 2 weeks ago
- Cobalt Strike BOF that extracts selected Windows registry hives directly from a raw NTFS volume by parsing NTFS metadata and reading file…☆112Oct 11, 2026Updated 3 weeks ago
- BAADTokenBroker is a post-exploitation tool designed to interact with Microsoft Entra ID device-bound keys.☆82Apr 11, 2026Updated 6 months ago
- Proof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-writ…☆108Aug 16, 2026Updated 2 months ago
- Proof-of-Concept tool for extracting credential material from protected sessions on modern Windows systems.☆752May 9, 2026Updated 5 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- The Azure Execution Tool☆158Feb 6, 2026Updated 9 months ago
- ☆56Sep 18, 2026Updated last month
- A marketplace for LLM skills☆739Updated this week
- The ADSyncDump BOF is a port of Dirk-Jan Mollema's adconnectdump.py / ADSyncDecrypt into a Beacon Object File (BOF) with zero dependencie…☆183Sep 3, 2025Updated last year
- Post-ex tool to interact with chromium browser when CDP is enabled☆47May 15, 2026Updated 5 months ago
- Ditto is a Windows Mythic Agent for Chroimium Browsers that utilizes Chromium extensions as its base agent with optional sidecar attachme…☆34Oct 15, 2026Updated 3 weeks ago
- DCOM in memory and fileless lateral movement techniques through .Net deserilization☆296Jun 22, 2026Updated 4 months ago
- Detection-aware BloodHound attack-path scoring - the quietest route to your objective, calibrated across five detection tiers (audit/EDR/…☆67Aug 22, 2026Updated 2 months ago
- Python and BOF utilites to the determine EPA enforcement levels of popular NTLM relay targets from the offensive perspective☆197Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Mythic C2 MSTeams Communication Channel☆42Sep 13, 2026Updated last month
- abusing windows toast notifications for fun and user manipulation☆106Jul 11, 2026Updated 3 months ago
- Drop any Windows DPAPI artifact and it identifies the format and the exact master key it needs, then decrypts once you supply the key. Of…☆31Sep 23, 2026Updated last month
- ☆73Oct 22, 2026Updated 2 weeks ago
- Cobalt Strike Aggressor Script for identifying security products on Windows hosts — six enumeration methods rated by noise level, from si…☆98Feb 6, 2026Updated 9 months ago
- Async BOF to automatically extract or renew Kerberos TGTs on a target system.☆139Jul 23, 2026Updated 3 months ago
- This cheatsheet maps common impacket workflows to their modern alternatives☆310May 30, 2026Updated 5 months ago