Brute force attack tool for Azure AD Autologon/Seamless SSO - Source: https://arstechnica.com/information-technology/2021/09/new-azure-active-directory-password-brute-forcing-flaw-has-no-fix/
☆108Jun 27, 2024Updated 2 years ago
Alternatives and similar repositories for AzureAD_Autologon_Brute
Users that are interested in AzureAD_Autologon_Brute are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- POC of SecureWorks' recent Azure Active Directory password brute-forcing vuln☆193Sep 29, 2021Updated 5 years ago
- ☆28Aug 8, 2021Updated 5 years ago
- ☆40Jul 29, 2021Updated 5 years ago
- WhoAmI by asking the LDAP service on a domain controller.☆67Feb 8, 2022Updated 4 years ago
- scan for NTLM directories☆396Aug 13, 2025Updated last year
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Collection of remote authentication triggers in C#☆543May 15, 2024Updated 2 years ago
- A proof-of-concept tool that attempts to retrieve the configuration from the memory dump of an F-Secure C3 Relay executable.☆16Jul 2, 2021Updated 5 years ago
- C# tool for installing a shared network printer abusing the PrinterNightmare bug to allow other network machines easy privesc!☆181Aug 4, 2021Updated 5 years ago
- Script to use SysWhispers2 direct system calls from Cobalt Strike BOFs☆126May 24, 2022Updated 4 years ago
- Strstr with user-supplied needle and filename as a BOF.☆32Sep 27, 2021Updated 5 years ago
- Password attacks and MFA validation against various endpoints in Azure and Office 365☆153Feb 10, 2023Updated 3 years ago
- ☆53Sep 16, 2021Updated 5 years ago
- Cobalt Strike Beacon Object Files☆168May 2, 2022Updated 4 years ago
- LiquidSnake is a tool that allows operators to perform fileless lateral movement using WMI Event Subscriptions and GadgetToJScript☆352Sep 1, 2021Updated 5 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- PIC lsass dumper using cloned handles☆600Oct 18, 2022Updated 4 years ago
- Proof of Concept Utilities Developed to Research NTLM Relaying Attacks Targeting ADFS☆192Jun 22, 2022Updated 4 years ago
- Automate AV evasion by calling AMSI☆87May 31, 2023Updated 3 years ago
- retrieve information via O365 and AzureAD with a valid cred☆747Aug 14, 2022Updated 4 years ago
- OfensivePipeline allows you to download and build C# tools, applying certain modifications in order to improve their evasion for Red Team…☆821Jun 5, 2026Updated 5 months ago
- A crappy hook on SpAcceptLsaModeContext that prints incoming auth attempts. WIP☆37Jul 27, 2021Updated 5 years ago
- ☆143May 4, 2022Updated 4 years ago
- Azure JWT Token Manipulation Toolset☆737Dec 6, 2024Updated last year
- Enumerate Domain Data☆334Sep 13, 2023Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- onedrive user enumeration - pentest tool to enumerate valid o365 users☆774Jul 29, 2025Updated last year
- A .NET implementation to dump SAM, SYSTEM, SECURITY registry hives from a remote host☆43Dec 8, 2023Updated 2 years ago
- Proof of Concept in Go from Secureworks' research on Azure Active Directory Brute-Force Attacks. Inspired by @treebuilder's POC on PowerS…☆14Feb 23, 2022Updated 4 years ago
- A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certifica…☆878Mar 20, 2023Updated 3 years ago
- Spray365 makes spraying Microsoft accounts (Office 365 / Azure AD) easy through its customizable two-step password spraying approach. The…☆382Jun 24, 2025Updated last year
- Another LSASS dumping tool that uses a dynamically compiled LSA plugin to grab an lsass handle and API hooking for capturing the dump in…☆105Apr 18, 2022Updated 4 years ago
- Log converter from CS log to Ghostwriter CSV☆31Nov 23, 2020Updated 5 years ago
- Tool for interacting with outlook interop during red team engagements☆144Jun 29, 2021Updated 5 years ago
- leaking net-ntlm with webdav☆28Feb 23, 2021Updated 5 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- DLL Exports Extraction BOF with optional NTFS transactions.☆93Nov 5, 2021Updated 5 years ago
- Koppeling x Metatwin x LazySign☆217Aug 26, 2021Updated 5 years ago
- Cobalt Strike beacon object file implementation for trusted path UAC bypass. The target executable will be called without involving "cmd.…☆143Aug 16, 2021Updated 5 years ago
- GhostBuild is a collection of simple MSBuild launchers for various GhostPack/.NET projects☆253Sep 26, 2020Updated 6 years ago
- Another LSASS dumping tool that uses a dynamically compiled LSA plugin to grab an lsass handle and API hooking for capturing the dump in…☆274Mar 18, 2021Updated 5 years ago
- ☆94May 14, 2022Updated 4 years ago
- Dumping SAM / SECURITY / SYSTEM registry hives with a Beacon Object File☆220Oct 8, 2020Updated 6 years ago