AuthStrike is an identity and authentication security testing tool for controlled simulations, security research, and education purpose only. It helps security teams test Microsoft Entra attack paths such as device-code authentication, token handling, device registration, Microsoft Graph/Outlook access, and supported token-refresh flows.
☆22Sep 9, 2026Updated last month
Alternatives and similar repositories for AuthStrike
Users that are interested in AuthStrike are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Sleep Obfuscation via CreateThreadpoolTimer☆24Jul 27, 2026Updated 3 months ago
- ☆12Feb 26, 2025Updated last year
- A collection of DPAPI hunting and parsing BOFs☆39Mar 3, 2026Updated 8 months ago
- dcsync bof☆54Feb 13, 2026Updated 8 months ago
- A New Exploitation Technique for Visual Studio Projects☆13Nov 5, 2023Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Dashboard for Cirro☆15Aug 7, 2026Updated 3 months ago
- An NTP channel for Beacons, implemented using Cobalt Strike’s External C2 framework.☆35Oct 6, 2025Updated last year
- Cobalt Strike Beacon Object File to to change the user's desktop wallpaper☆18Sep 15, 2023Updated 3 years ago
- Project Sato - C2☆10Apr 24, 2025Updated last year
- An Aggressor Script that utilizes NtCreateUserProcess to run binaries☆32Jan 30, 2025Updated last year
- Tool to authenticate to an LDAP/S server with a certificate through Schannel written in Rust. 🦀☆77Oct 10, 2026Updated 3 weeks ago
- Beacon Object File (BOF) to obtain Entra tokens via authcode flow.☆151Jan 17, 2026Updated 9 months ago
- Open Source implementation of PsPipeJack☆27May 27, 2026Updated 5 months ago
- Async BOF for NTLMv2 Hash Snooping from ETW☆13Apr 2, 2026Updated 7 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Windows host hardening auditor and remediation tool in PowerShell: CIS, DISA STIG, Essential Eight checks, reversible fixes, optional AI …☆25Updated this week
- A credential extraction BOF for Veeam Backup and Replication and Veeam One☆82Sep 16, 2026Updated last month
- Process Explorer vulnerable driver PPL Bypass☆28Sep 30, 2026Updated last month
- PowerShell Implementation of ADFSDump to assist with GoldenSAML☆45Jul 30, 2026Updated 3 months ago
- Transform LDAP filters, BaseDNs, attribute lists, and attribute entries using composable middleware chains. Zero dependencies. Works as a…☆46Apr 13, 2026Updated 6 months ago
- Python scripts that helps in the development of PPKG binaries☆16Jul 31, 2026Updated 3 months ago
- Proof of concept demonstrating a method of proxying syscalls indirectly☆10Jul 3, 2024Updated 2 years ago
- ADSIsearch is a Beacon Object File (BOF) to query Active Directory using ADDS, ADSI, and Network Management WinAPIs.☆10Feb 23, 2025Updated last year
- Cobalt Strike BOF☆58Dec 10, 2025Updated 10 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- ☆75Apr 20, 2026Updated 6 months ago
- Object File (BOF) that demonstrates privilege escalation through a misconfigured AlwaysInstallElevated policy.☆13Sep 17, 2026Updated last month
- ☆37Sep 6, 2026Updated 2 months ago
- A Sliver C2 module for NetExec☆13Updated this week
- A PoC tool for the Pass-ta-key Golden Attack, covering the extraction of the Google Password Manager Security Domain Secret from Chrome p…☆35Updated this week
- BOF POC of the DSCourier project / invoking WinGet via COM☆90Apr 23, 2026Updated 6 months ago
- The swiss army knife of LSASS dumping☆14Jan 4, 2026Updated 10 months ago
- Silent;Call — Pre-authentication remote root on Cisco CUCM 15.x (CVSS 10.0)☆30Aug 4, 2026Updated 3 months ago
- Ask the Web Account Manager (WAM) for Entra ID tokens☆167Sep 11, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- 渗透测试人员可以通过此BOF，将非托管 Windows可执行文件加载到Beacon内存中并执行它们，检索输出并将其呈现在 Beacon 控制台中☆13Mar 18, 2025Updated last year
- A BOF to retrieve decryption keys for WhatsApp Desktop and a utility script to decrypt the databases.☆91Mar 2, 2025Updated last year
- EDRUnChoker - fileless WMI defense that removes EDRChoker QoS throttling policies☆49Jun 8, 2026Updated 5 months ago
- Process ID Mutator via BYOVD Kernel R/W☆22Sep 6, 2026Updated 2 months ago
- vbkview is a tool designed to browse and extract data from unencrypted Veeam backups.☆15Jul 20, 2026Updated 3 months ago
- Enumerate user accounts and registered authentication methods via the Microsoft Self-Service Password Reset (SSPR) portal☆60Sep 15, 2026Updated last month
- Request a service ticket from a foreign DC using an inter-realm TGT, for cross-realm cases Impacket's getST.py mishandles☆10Aug 4, 2026Updated 3 months ago