A tool that implements the Golden SAML attack
☆343Oct 15, 2018Updated 7 years ago
Alternatives and similar repositories for shimit
Users that are interested in shimit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Microsoft External Attack Tool☆178Dec 8, 2022Updated 3 years ago
- ☆416Apr 21, 2026Updated last month
- ☆384Aug 7, 2023Updated 2 years ago
- Dump Azure AD Connect credentials for Azure AD and Active Directory☆793Aug 26, 2025Updated 9 months ago
- Various Cheat Sheets☆183Jun 24, 2021Updated 4 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- HTA encryption tool for RedTeams☆1,424Nov 9, 2022Updated 3 years ago
- Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, …☆945Nov 11, 2024Updated last year
- A collection of Azure AD/Entra tools for offensive and defensive security purposes☆2,610May 21, 2026Updated last week
- initial commit☆173Jun 11, 2018Updated 7 years ago
- AzureC2Relay is an Azure Function that validates and relays Cobalt Strike beacon traffic by verifying the incoming requests based on a Co…☆236Feb 15, 2021Updated 5 years ago
- Simple C# for checking for the existence of credential files related to AWS, Microsoft Azure, and Google Compute.☆177Sep 18, 2018Updated 7 years ago
- DEPRECATED SharpRoast is a C# port of various PowerView's Kerberoasting functionality.☆251Sep 25, 2018Updated 7 years ago
- A tool to abuse Exchange services☆2,304Jun 10, 2024Updated last year
- A Red Team tool for exfiltrating sensitive data from Confluence pages.☆115Feb 21, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆420Apr 28, 2021Updated 5 years ago
- LyncSniper: A tool for penetration testing Skype for Business and Lync deployments☆307Jul 3, 2020Updated 5 years ago
- This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported …☆850Jun 25, 2024Updated last year
- .Net port of the remote SAM + LSA Secrets dumping functionality of impacket's secretsdump.py☆615Feb 16, 2023Updated 3 years ago
- A C# utility for interacting with SCCM☆691Mar 30, 2026Updated last month
- Test Azure environment for MFA misconfigurations☆12Jan 13, 2023Updated 3 years ago
- retrieve information via O365 and AzureAD with a valid cred☆741Aug 14, 2022Updated 3 years ago
- Tool to extract Kerberos tickets from Linux kernel keys.☆242May 28, 2019Updated 7 years ago
- Powershell script for enumerating vulnerable DCOM Applications☆266Nov 30, 2018Updated 7 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Proof of Concept Utilities Developed to Research NTLM Relaying Attacks Targeting ADFS☆189Jun 22, 2022Updated 3 years ago
- Swift code to run a dylib on disk☆16May 9, 2022Updated 4 years ago
- ☆127Jun 19, 2020Updated 5 years ago
- Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Dir…☆1,618Jan 23, 2024Updated 2 years ago
- ☆263Apr 10, 2023Updated 3 years ago
- .NET IPv4/IPv6 machine-in-the-middle tool for penetration testers☆2,969Nov 19, 2025Updated 6 months ago
- Recovering NTLM hashes from Credential Guard☆386Dec 26, 2022Updated 3 years ago
- Microsoft Applocker evasion tool☆39Nov 26, 2019Updated 6 years ago
- A C# implementation of PrivExchange by @_dirkjan.☆155Mar 15, 2019Updated 7 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆53Oct 29, 2024Updated last year
- Payload Generation Framework☆1,982Aug 21, 2024Updated last year
- A list of Domain Frontable Domains by CDN☆575Jan 26, 2022Updated 4 years ago
- Physmem2profit can be used to create a minidump of a target hosts' LSASS process by analysing physical memory remotely☆424Jul 27, 2022Updated 3 years ago
- A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techni…☆1,391Oct 27, 2023Updated 2 years ago
- ☆98Feb 21, 2019Updated 7 years ago
- LDAP library for auditing MS AD☆495Feb 11, 2026Updated 3 months ago