cyberark / shimitLinks
A tool that implements the Golden SAML attack
☆337Updated 7 years ago
Alternatives and similar repositories for shimit
Users that are interested in shimit are comparing it to the libraries listed below
Sorting:
- Bloodhound Attack Path Automation in CobaltStrike☆320Updated 5 years ago
- ☆395Updated last week
- LyncSniper: A tool for penetration testing Skype for Business and Lync deployments☆306Updated 5 years ago
- An LDAP based Active Directory user and group enumeration tool☆305Updated 2 years ago
- Analyze ARP requests to identify intercommunicating hosts and stale network address configurations (SNACs)☆69Updated 3 years ago
- ☆283Updated 7 years ago
- Weaponizing Splunk with reverse and bind shells.☆182Updated 8 years ago
- Domain user enumeration tool☆214Updated 2 years ago
- ☆172Updated 7 years ago
- A collection of files for adding and leveraging custom properties in BloodHound.☆186Updated 5 years ago
- Egressbuster is a method to check egress filtering and identify if ports are allowed. If they are, you can automatically spawn a shell.☆367Updated last year
- A simple python tool based on Impacket that tests servers for various known NTLM vulnerabilities☆204Updated 5 years ago
- A framework for stealthy domain reconnaissance☆303Updated 4 years ago
- Red Team C2 Infrastructure built in AWS using Ansible!☆231Updated 5 years ago
- Rapid Attack Infrastructure (RAI)☆307Updated 11 months ago
- Resources for our Active Directory security workshops☆140Updated 4 years ago
- Sheepl : Creating realistic user behaviour for supporting tradecraft development within lab environments☆399Updated last year
- Disposable and resilient red team infrastructure with Terraform☆278Updated 6 years ago
- ☆333Updated 2 years ago
- Simple C# for checking for the existence of credential files related to AWS, Microsoft Azure, and Google Compute.☆177Updated 7 years ago
- A curated list of awesome BloodhoundAD resources☆235Updated 3 years ago
- A PowerShell module to deploy active directory decoy objects.☆236Updated 5 years ago
- A Burp Suite Extension to pull Employee Names from Google and Bing LinkedIn Search Results☆202Updated last year
- Enumerate usernames on a domain where you have no creds by using SMB Relay with low priv.☆399Updated 5 years ago
- Automate creating resilient, disposable, secure and agile infrastructure for Red Teams☆381Updated 5 years ago
- Auto-generate an HTaccess for payload delivery -- automatically pulls ips/nets/etc from known sandbox companies/sources that have been se…☆167Updated 5 years ago
- The Discretionary ACL Modification Project: Persistence Through Host-based Security Descriptor Modification☆380Updated 6 years ago
- ☆523Updated 3 years ago
- Microsoft External Attack Tool☆178Updated 2 years ago
- Check for valid credentials across a network over SMB☆268Updated last year