cyberark / shimit
A tool that implements the Golden SAML attack
☆331Updated 6 years ago
Related projects ⓘ
Alternatives and complementary repositories for shimit
- Bloodhound Attack Path Automation in CobaltStrike☆311Updated 4 years ago
- LyncSniper: A tool for penetration testing Skype for Business and Lync deployments☆304Updated 4 years ago
- ☆371Updated last month
- Egressbuster is a method to check egress filtering and identify if ports are allowed. If they are, you can automatically spawn a shell.☆345Updated 3 months ago
- ☆279Updated 6 years ago
- Analyze ARP requests to identify intercommunicating hosts and stale network address configurations (SNACs)☆62Updated 2 years ago
- Disposable and resilient red team infrastructure with Terraform☆253Updated 5 years ago
- A framework for stealthy domain reconnaissance☆293Updated 3 years ago
- Automate creating resilient, disposable, secure and agile infrastructure for Red Teams☆373Updated 4 years ago
- A multithreaded tool designed to identify if credentials are valid, invalid, or local admin valid credentials within a network at-scale v…☆444Updated 2 years ago
- Enumerate usernames on a domain where you have no creds by using SMB Relay with low priv.☆391Updated 4 years ago
- The Discretionary ACL Modification Project: Persistence Through Host-based Security Descriptor Modification☆373Updated 5 years ago
- Sheepl : Creating realistic user behaviour for supporting tradecraft development within lab environments☆392Updated 8 months ago
- A collection of Ansible Playbooks that configure Kali to use Fish & install a number of tools☆161Updated 5 years ago
- Malicious WMI Events using PowerShell☆370Updated 8 years ago
- locate and attack Lync/Skype for Business☆334Updated last month
- Check for valid credentials across a network over SMB☆256Updated 10 months ago
- Egress-Assess is a tool used to test egress data detection capabilities☆618Updated last year
- GoFetch is a tool to automatically exercise an attack plan generated by the BloodHound application.☆629Updated 7 years ago
- Rapid Attack Infrastructure (RAI)☆297Updated 3 years ago
- Detect and abuse risky SPNs☆259Updated 7 years ago
- This repo is for WMIOps, a powershell script which uses WMI for various purposes across a network.☆381Updated 4 months ago
- ☆513Updated 2 years ago
- A Burp Suite Extension to pull Employee Names from Google and Bing LinkedIn Search Results☆185Updated 4 months ago
- A curated list of awesome BloodhoundAD resources☆227Updated 2 years ago
- An NTLM relay tool to the EWS endpoint for on-premise exchange servers. Provides an OWA for hackers.☆301Updated 2 years ago
- Provides In-memory compilation and reflective loading of C# apps for AV evasion.☆368Updated 8 months ago
- Search for categorized domain☆439Updated 5 years ago
- ☆272Updated 2 years ago