A tool that implements the Golden SAML attack
☆345Oct 15, 2018Updated 7 years ago
Alternatives and similar repositories for shimit
Users that are interested in shimit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆420Jun 16, 2026Updated last month
- Microsoft External Attack Tool☆177Dec 8, 2022Updated 3 years ago
- ☆386Aug 7, 2023Updated 3 years ago
- Dump Azure AD Connect credentials for Azure AD and Active Directory☆807Aug 26, 2025Updated 11 months ago
- HTA encryption tool for RedTeams☆1,429Nov 9, 2022Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- A collection of Azure AD/Entra tools for offensive and defensive security purposes☆2,687Updated this week
- Exchange your privileges for Domain Admin privs by abusing Exchange☆1,076Jan 23, 2020Updated 6 years ago
- Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, …☆954Nov 11, 2024Updated last year
- initial commit☆172Jun 11, 2018Updated 8 years ago
- Various Cheat Sheets☆183Jun 24, 2021Updated 5 years ago
- DEPRECATED SharpRoast is a C# port of various PowerView's Kerberoasting functionality.☆250Sep 25, 2018Updated 7 years ago
- A tool to abuse Exchange services☆2,313Jun 10, 2024Updated 2 years ago
- AzureC2Relay is an Azure Function that validates and relays Cobalt Strike beacon traffic by verifying the incoming requests based on a Co…☆233Feb 15, 2021Updated 5 years ago
- A Red Team tool for exfiltrating sensitive data from Confluence pages.☆115Feb 21, 2023Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A C# utility for interacting with SCCM☆702Mar 30, 2026Updated 4 months ago
- LyncSniper: A tool for penetration testing Skype for Business and Lync deployments☆307Jul 3, 2020Updated 6 years ago
- Simple C# for checking for the existence of credential files related to AWS, Microsoft Azure, and Google Compute.☆177Sep 18, 2018Updated 7 years ago
- retrieve information via O365 and AzureAD with a valid cred☆745Aug 14, 2022Updated 3 years ago
- ☆427Apr 28, 2021Updated 5 years ago
- This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported …☆864Jun 25, 2024Updated 2 years ago
- .Net port of the remote SAM + LSA Secrets dumping functionality of impacket's secretsdump.py☆614Feb 16, 2023Updated 3 years ago
- Swift code to run a dylib on disk☆16May 9, 2022Updated 4 years ago
- .NET IPv4/IPv6 machine-in-the-middle tool for penetration testers☆3,005Nov 19, 2025Updated 8 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Dir…☆1,618Jan 23, 2024Updated 2 years ago
- Tool to extract Kerberos tickets from Linux kernel keys.☆259May 28, 2019Updated 7 years ago
- Powershell script for enumerating vulnerable DCOM Applications☆264Nov 30, 2018Updated 7 years ago
- A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techni…☆1,410Oct 27, 2023Updated 2 years ago
- Microsoft Applocker evasion tool☆39Nov 26, 2019Updated 6 years ago
- A C# implementation of PrivExchange by @_dirkjan.☆155Mar 15, 2019Updated 7 years ago
- Proof of Concept Utilities Developed to Research NTLM Relaying Attacks Targeting ADFS☆188Jun 22, 2022Updated 4 years ago
- ☆98Feb 21, 2019Updated 7 years ago
- Payload Generation Framework☆1,985Aug 21, 2024Updated last year
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- ☆263Apr 10, 2023Updated 3 years ago
- Recovering NTLM hashes from Credential Guard☆388Dec 26, 2022Updated 3 years ago
- Lateral Movement technique using DCOM and HTA☆233Oct 18, 2022Updated 3 years ago
- A list of Domain Frontable Domains by CDN☆577Jan 26, 2022Updated 4 years ago
- Physmem2profit can be used to create a minidump of a target hosts' LSASS process by analysing physical memory remotely☆422Jul 27, 2022Updated 4 years ago
- ☆127Jun 19, 2020Updated 6 years ago
- PXEThief is a set of tooling that can extract passwords from the Operating System Deployment functionality in Microsoft Endpoint Configur…☆434May 29, 2024Updated 2 years ago