A tool that implements the Golden SAML attack
☆347Oct 15, 2018Updated 8 years ago
Alternatives and similar repositories for shimit
Users that are interested in shimit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆424Jun 16, 2026Updated 4 months ago
- Microsoft External Attack Tool☆177Dec 8, 2022Updated 3 years ago
- Powershell script for enumerating vulnerable DCOM Applications☆264Nov 30, 2018Updated 7 years ago
- Proof of Concept Utilities Developed to Research NTLM Relaying Attacks Targeting ADFS☆190Jun 22, 2022Updated 4 years ago
- HTA encryption tool for RedTeams☆1,429Nov 9, 2022Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆108May 14, 2018Updated 8 years ago
- A tool to abuse Exchange services☆2,311Jun 10, 2024Updated 2 years ago
- DEPRECATED SharpRoast is a C# port of various PowerView's Kerberoasting functionality.☆250Sep 25, 2018Updated 8 years ago
- ☆384Aug 7, 2023Updated 3 years ago
- Exchange your privileges for Domain Admin privs by abusing Exchange☆1,087Jan 23, 2020Updated 6 years ago
- Tool to perform lateral movement between AAD joined devices☆67Jun 8, 2022Updated 4 years ago
- Enumerate usernames on a domain where you have no creds by using SMB Relay with low priv.☆400May 20, 2020Updated 6 years ago
- A C# utility for interacting with SCCM☆707Sep 29, 2026Updated last month
- ☆99Feb 21, 2019Updated 7 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Roast in the Middle☆296Sep 17, 2026Updated last month
- A C# implementation of PrivExchange by @_dirkjan.☆155Mar 15, 2019Updated 7 years ago
- Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS☆1,693Oct 11, 2018Updated 8 years ago
- PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server☆2,747Dec 12, 2024Updated last year
- This repo is for WMIOps, a powershell script which uses WMI for various purposes across a network.☆383Jun 25, 2024Updated 2 years ago
- retrieve information via O365 and AzureAD with a valid cred☆747Aug 14, 2022Updated 4 years ago
- Physmem2profit can be used to create a minidump of a target hosts' LSASS process by analysing physical memory remotely☆424Jul 27, 2022Updated 4 years ago
- nextnet is a pivot point discovery tool written in Go.☆449Aug 4, 2025Updated last year
- Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, …☆959Nov 11, 2024Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported …☆868Jun 25, 2024Updated 2 years ago
- A Red Team tool for exfiltrating sensitive data from Confluence pages.☆116Feb 21, 2023Updated 3 years ago
- SMB MiTM tool with a focus on attacking clients through file content swapping, lnk swapping, as well as compromising any data passed over…☆381Aug 17, 2018Updated 8 years ago
- Microsoft Applocker evasion tool☆39Nov 26, 2019Updated 6 years ago
- Python api for usage with cobalt strike's External C2 specification☆239Mar 22, 2023Updated 3 years ago
- Various Cheat Sheets☆183Jun 24, 2021Updated 5 years ago
- SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader☆1,337Oct 1, 2019Updated 7 years ago
- A Django application to help red team operators manage a library of domain names☆166May 24, 2023Updated 3 years ago
- Generate Mimikatz Golden Ticket commands with ease!☆53Dec 4, 2020Updated 5 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Implementing Kerberoast attack fully in python☆71Sep 29, 2018Updated 8 years ago
- A little tool for detecting suspicious privileged NTLM connections, in particular Pass-The-Hash attack, based on event viewer logs.☆168Feb 19, 2025Updated last year
- A collection of Azure AD/Entra tools for offensive and defensive security purposes☆2,752Oct 22, 2026Updated last week
- Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Dir…☆1,630Jan 23, 2024Updated 2 years ago
- Firework is a proof of concept tool to interact with Microsoft Workplaces creating valid files required for the provisioning process.☆43Aug 7, 2020Updated 6 years ago
- SpoolSample -> Responder w/NetNTLM Downgrade -> NetNTLMv1 -> NTLM -> Kerberos Silver Ticket☆984Jul 26, 2021Updated 5 years ago
- Checks expired domains for categorization/reputation and Archive.org history to determine good candidates for phishing and C2 domain name…☆1,687Jun 6, 2024Updated 2 years ago