AAD related enumeration in Nim
☆133Sep 7, 2023Updated 3 years ago
Alternatives and similar repositories for azbelt
Users that are interested in azbelt are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- COFF and BOF Loader written in Nim☆178Apr 4, 2026Updated 6 months ago
- Cobalt Strike BOF that identifies Attack Surface Reduction (ASR) rules, actions, and exclusion locations☆164Mar 1, 2024Updated 2 years ago
- Python module for running BOFs☆81Nov 28, 2025Updated 11 months ago
- Apply a divide and conquer approach to bypass EDRs☆289Oct 19, 2023Updated 3 years ago
- A standalone DLL that exports databases in cleartext once injected in the KeePass process.☆300Mar 1, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Indirect Syscalls: HellsGate in Nim, but making sure that all syscalls go through NTDLL (as in RecycledGate).☆186Feb 12, 2023Updated 3 years ago
- A collection of various and sundry code snippets that leverage .NET dynamic tradecraft☆144May 18, 2024Updated 2 years ago
- ☆48Feb 11, 2023Updated 3 years ago
- A care package of useful bofs for red team engagments☆53Dec 6, 2024Updated last year
- An other No-Fix LPE, NTLMRelay2Self over HTTP (Webdav).☆421Jan 27, 2024Updated 2 years ago
- Infect Shared Files In Memory for Lateral Movement☆189Dec 14, 2022Updated 3 years ago
- DLL sideloading/proxying with Nim!☆174Dec 4, 2022Updated 3 years ago
- Programmatically start WebClient from an unprivileged session to enable that juicy privesc.☆80Feb 8, 2023Updated 3 years ago
- Impacket is a collection of Python classes for working with network protocols.☆301Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Beacon Object File & C# project to check LDAP signing☆207Aug 7, 2024Updated 2 years ago
- ☆109Jan 4, 2023Updated 3 years ago
- Click Once + App Domain☆69Feb 23, 2026Updated 8 months ago
- ☆100Oct 27, 2022Updated 4 years ago
- Proof of Concept Utilities Developed to Research NTLM Relaying Attacks Targeting ADFS☆192Jun 22, 2022Updated 4 years ago
- Azure JWT Token Manipulation Toolset☆737Dec 6, 2024Updated last year
- Small utility to chunk up a large BloodHound JSON file into smaller files for importing.☆99Apr 13, 2023Updated 3 years ago
- Dump NTDS with golden certificates and UnPAC the hash☆649Mar 20, 2024Updated 2 years ago
- A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other ob…☆496Oct 14, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆61Aug 30, 2021Updated 5 years ago
- tool for requesting Entra ID's P2P certificate and authenticating to a remote Entra joinned devices with it☆136Aug 23, 2025Updated last year
- Collection of tools to use with Azure Applications☆114Oct 13, 2023Updated 3 years ago
- ☆163Dec 30, 2022Updated 3 years ago
- Collection of offensive tools targeting Microsoft Azure☆228Oct 26, 2026Updated last week
- ErebusGate for Nim Bypass AV/EDR☆159Nov 7, 2022Updated 3 years ago
- Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel☆419Feb 23, 2024Updated 2 years ago
- C# POC to extract NetNTLMv1/v2 hashes from ETW provider☆260May 10, 2023Updated 3 years ago
- The BackupOperatorToolkit contains different techniques allowing you to escalate from Backup Operator to Domain Admin☆179Feb 14, 2023Updated 3 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- DPAPI looting in Python☆576Oct 27, 2026Updated last week
- SCCMHunter is a post-ex tool built to streamline identifying, profiling, and attacking SCCM related assets in an Active Directory domain.…☆961Updated this week
- This repo hosts a poc of how to execute F# code within an unmanaged process☆71Jun 25, 2024Updated 2 years ago
- A Python POC for CRED1 over SOCKS5☆173Oct 5, 2024Updated 2 years ago
- A tool for pointesters to find candies in SharePoint☆287Nov 4, 2022Updated 3 years ago
- User enumeration and password bruteforce on Azure, ADFS, OWA, O365, Teams and gather emails on Linkedin☆497Sep 24, 2025Updated last year
- WindowSpy is a Cobalt Strike Beacon Object File meant for automated and targeted user surveillance.☆285Feb 24, 2025Updated last year