A tool that implements the Golden SAML attack
☆343Oct 15, 2018Updated 7 years ago
Alternatives and similar repositories for shimit
Users that are interested in shimit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Microsoft External Attack Tool☆178Dec 8, 2022Updated 3 years ago
- ☆417Apr 21, 2026Updated last month
- ☆384Aug 7, 2023Updated 2 years ago
- Dump Azure AD Connect credentials for Azure AD and Active Directory☆792Aug 26, 2025Updated 9 months ago
- Various Cheat Sheets☆183Jun 24, 2021Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- HTA encryption tool for RedTeams☆1,427Nov 9, 2022Updated 3 years ago
- Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, …☆949Nov 11, 2024Updated last year
- A collection of Azure AD/Entra tools for offensive and defensive security purposes☆2,636May 21, 2026Updated 3 weeks ago
- initial commit☆173Jun 11, 2018Updated 8 years ago
- AzureC2Relay is an Azure Function that validates and relays Cobalt Strike beacon traffic by verifying the incoming requests based on a Co…☆236Feb 15, 2021Updated 5 years ago
- Simple C# for checking for the existence of credential files related to AWS, Microsoft Azure, and Google Compute.☆177Sep 18, 2018Updated 7 years ago
- DEPRECATED SharpRoast is a C# port of various PowerView's Kerberoasting functionality.☆251Sep 25, 2018Updated 7 years ago
- A tool to abuse Exchange services☆2,306Jun 10, 2024Updated 2 years ago
- A Red Team tool for exfiltrating sensitive data from Confluence pages.☆115Feb 21, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆421Apr 28, 2021Updated 5 years ago
- LyncSniper: A tool for penetration testing Skype for Business and Lync deployments☆307Jul 3, 2020Updated 5 years ago
- This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported …☆857Jun 25, 2024Updated last year
- .Net port of the remote SAM + LSA Secrets dumping functionality of impacket's secretsdump.py☆615Feb 16, 2023Updated 3 years ago
- A C# utility for interacting with SCCM☆697Mar 30, 2026Updated 2 months ago
- Test Azure environment for MFA misconfigurations☆12Jan 13, 2023Updated 3 years ago
- retrieve information via O365 and AzureAD with a valid cred☆742Aug 14, 2022Updated 3 years ago
- Tool to extract Kerberos tickets from Linux kernel keys.☆243May 28, 2019Updated 7 years ago
- Powershell script for enumerating vulnerable DCOM Applications☆267Nov 30, 2018Updated 7 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Proof of Concept Utilities Developed to Research NTLM Relaying Attacks Targeting ADFS☆185Jun 22, 2022Updated 3 years ago
- Swift code to run a dylib on disk☆16May 9, 2022Updated 4 years ago
- ☆127Jun 19, 2020Updated 6 years ago
- Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Dir…☆1,618Jan 23, 2024Updated 2 years ago
- ☆263Apr 10, 2023Updated 3 years ago
- .NET IPv4/IPv6 machine-in-the-middle tool for penetration testers☆2,983Nov 19, 2025Updated 7 months ago
- Recovering NTLM hashes from Credential Guard☆387Dec 26, 2022Updated 3 years ago
- Microsoft Applocker evasion tool☆39Nov 26, 2019Updated 6 years ago
- A C# implementation of PrivExchange by @_dirkjan.☆155Mar 15, 2019Updated 7 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ☆53Oct 29, 2024Updated last year
- Payload Generation Framework☆1,984Aug 21, 2024Updated last year
- A list of Domain Frontable Domains by CDN☆577Jan 26, 2022Updated 4 years ago
- Physmem2profit can be used to create a minidump of a target hosts' LSASS process by analysing physical memory remotely☆424Jul 27, 2022Updated 3 years ago
- A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techni…☆1,391Oct 27, 2023Updated 2 years ago
- ☆98Feb 21, 2019Updated 7 years ago
- LDAP library for auditing MS AD☆496Feb 11, 2026Updated 4 months ago