cyberark / shimit
A tool that implements the Golden SAML attack
☆336Updated 6 years ago
Alternatives and similar repositories for shimit:
Users that are interested in shimit are comparing it to the libraries listed below
- Bloodhound Attack Path Automation in CobaltStrike☆316Updated 5 years ago
- LyncSniper: A tool for penetration testing Skype for Business and Lync deployments☆307Updated 4 years ago
- ☆384Updated 2 months ago
- GoFetch is a tool to automatically exercise an attack plan generated by the BloodHound application.☆633Updated 7 years ago
- The Discretionary ACL Modification Project: Persistence Through Host-based Security Descriptor Modification☆379Updated 5 years ago
- Analyze ARP requests to identify intercommunicating hosts and stale network address configurations (SNACs)☆67Updated 3 years ago
- Egressbuster is a method to check egress filtering and identify if ports are allowed. If they are, you can automatically spawn a shell.☆366Updated 9 months ago
- A multithreaded tool designed to identify if credentials are valid, invalid, or local admin valid credentials within a network at-scale v…☆449Updated 2 years ago
- An NTLM relay tool to the EWS endpoint for on-premise exchange servers. Provides an OWA for hackers.☆304Updated 2 years ago
- Automate creating resilient, disposable, secure and agile infrastructure for Red Teams☆378Updated 5 years ago
- ☆282Updated 7 years ago
- Detect and abuse risky SPNs☆262Updated 7 years ago
- Search for categorized domain☆444Updated 6 years ago
- Disposable and resilient red team infrastructure with Terraform☆266Updated 6 years ago
- ☆257Updated 2 years ago
- A framework for stealthy domain reconnaissance☆303Updated 3 years ago
- A PowerShell module to deploy active directory decoy objects.☆228Updated 5 years ago
- Rapid Attack Infrastructure (RAI)☆304Updated 5 months ago
- ☆272Updated 2 years ago
- goddi (go dump domain info) dumps Active Directory domain information☆429Updated 2 years ago
- ☆307Updated 6 years ago
- Egress-Assess is a tool used to test egress data detection capabilities☆650Updated last year
- Sheepl : Creating realistic user behaviour for supporting tradecraft development within lab environments☆396Updated last year
- Various Cheat Sheets☆181Updated 3 years ago
- Domain user enumeration tool☆215Updated last year
- ☆520Updated 2 years ago
- A collection of files for adding and leveraging custom properties in BloodHound.☆183Updated 5 years ago
- locate and attack Lync/Skype for Business☆336Updated 7 months ago
- Malicious WMI Events using PowerShell☆384Updated 8 years ago
- An LDAP based Active Directory user and group enumeration tool☆308Updated 2 years ago