A tool that implements the Golden SAML attack
☆346Oct 15, 2018Updated 7 years ago
Alternatives and similar repositories for shimit
Users that are interested in shimit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆426Jun 16, 2026Updated 3 months ago
- Microsoft External Attack Tool☆177Dec 8, 2022Updated 3 years ago
- ☆386Aug 7, 2023Updated 3 years ago
- Dump Azure AD Connect credentials for Azure AD and Active Directory☆811Aug 26, 2025Updated last year
- HTA encryption tool for RedTeams☆1,427Nov 9, 2022Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A collection of Azure AD/Entra tools for offensive and defensive security purposes☆2,721Aug 5, 2026Updated last month
- Exchange your privileges for Domain Admin privs by abusing Exchange☆1,078Jan 23, 2020Updated 6 years ago
- Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, …☆957Nov 11, 2024Updated last year
- initial commit☆172Jun 11, 2018Updated 8 years ago
- Various Cheat Sheets☆183Jun 24, 2021Updated 5 years ago
- DEPRECATED SharpRoast is a C# port of various PowerView's Kerberoasting functionality.☆250Sep 25, 2018Updated 7 years ago
- A tool to abuse Exchange services☆2,312Jun 10, 2024Updated 2 years ago
- AzureC2Relay is an Azure Function that validates and relays Cobalt Strike beacon traffic by verifying the incoming requests based on a Co…☆233Feb 15, 2021Updated 5 years ago
- A Red Team tool for exfiltrating sensitive data from Confluence pages.☆115Feb 21, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- LyncSniper: A tool for penetration testing Skype for Business and Lync deployments☆307Jul 3, 2020Updated 6 years ago
- A C# utility for interacting with SCCM☆703Mar 30, 2026Updated 5 months ago
- Simple C# for checking for the existence of credential files related to AWS, Microsoft Azure, and Google Compute.☆177Sep 18, 2018Updated 8 years ago
- retrieve information via O365 and AzureAD with a valid cred☆745Aug 14, 2022Updated 4 years ago
- This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported …☆866Jun 25, 2024Updated 2 years ago
- ☆430Apr 28, 2021Updated 5 years ago
- .Net port of the remote SAM + LSA Secrets dumping functionality of impacket's secretsdump.py☆613Feb 16, 2023Updated 3 years ago
- Swift code to run a dylib on disk☆16May 9, 2022Updated 4 years ago
- .NET IPv4/IPv6 machine-in-the-middle tool for penetration testers☆3,033Nov 19, 2025Updated 10 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Dir…☆1,617Jan 23, 2024Updated 2 years ago
- Tool to extract Kerberos tickets from Linux kernel keys.☆259May 28, 2019Updated 7 years ago
- Powershell script for enumerating vulnerable DCOM Applications☆264Nov 30, 2018Updated 7 years ago
- A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techni…☆1,417Oct 27, 2023Updated 2 years ago
- Microsoft Applocker evasion tool☆39Nov 26, 2019Updated 6 years ago
- A C# implementation of PrivExchange by @_dirkjan.☆154Mar 15, 2019Updated 7 years ago
- Proof of Concept Utilities Developed to Research NTLM Relaying Attacks Targeting ADFS☆192Jun 22, 2022Updated 4 years ago
- ☆98Feb 21, 2019Updated 7 years ago
- Payload Generation Framework☆1,988Aug 21, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆262Apr 10, 2023Updated 3 years ago
- Recovering NTLM hashes from Credential Guard☆386Dec 26, 2022Updated 3 years ago
- Lateral Movement technique using DCOM and HTA☆232Oct 18, 2022Updated 3 years ago
- Physmem2profit can be used to create a minidump of a target hosts' LSASS process by analysing physical memory remotely☆422Jul 27, 2022Updated 4 years ago
- ☆127Jun 19, 2020Updated 6 years ago
- A list of Domain Frontable Domains by CDN☆577Jan 26, 2022Updated 4 years ago
- PXEThief is a set of tooling that can extract passwords from the Operating System Deployment functionality in Microsoft Endpoint Configur…☆437May 29, 2024Updated 2 years ago