Brute force attack tool for Azure AD Autologon/Seamless SSO - Source: https://arstechnica.com/information-technology/2021/09/new-azure-active-directory-password-brute-forcing-flaw-has-no-fix/
☆108Jun 27, 2024Updated 2 years ago
Alternatives and similar repositories for AzureAD_Autologon_Brute
Users that are interested in AzureAD_Autologon_Brute are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- POC of SecureWorks' recent Azure Active Directory password brute-forcing vuln☆193Sep 29, 2021Updated 5 years ago
- Script to use SysWhispers2 direct system calls from Cobalt Strike BOFs☆126May 24, 2022Updated 4 years ago
- ☆40Jul 29, 2021Updated 5 years ago
- scan for NTLM directories☆396Aug 13, 2025Updated last year
- ☆28Aug 8, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- C# tool for installing a shared network printer abusing the PrinterNightmare bug to allow other network machines easy privesc!☆181Aug 4, 2021Updated 5 years ago
- ☆53Sep 16, 2021Updated 5 years ago
- LiquidSnake is a tool that allows operators to perform fileless lateral movement using WMI Event Subscriptions and GadgetToJScript☆351Sep 1, 2021Updated 5 years ago
- Proof of Concept in Go from Secureworks' research on Azure Active Directory Brute-Force Attacks. Inspired by @treebuilder's POC on PowerS…☆14Feb 23, 2022Updated 4 years ago
- Another LSASS dumping tool that uses a dynamically compiled LSA plugin to grab an lsass handle and API hooking for capturing the dump in…☆105Apr 18, 2022Updated 4 years ago
- Python port of MailSniper to exfiltrate emails via EWS endpoint☆87Feb 2, 2022Updated 4 years ago
- Proof of Concept Utilities Developed to Research NTLM Relaying Attacks Targeting ADFS☆191Jun 22, 2022Updated 4 years ago
- Dump Teams conversations☆17Jun 9, 2021Updated 5 years ago
- Using outlook COM objects to create convincing phishing emails without the user noticing. This project is meant for internal phishing.☆157Dec 22, 2020Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆143May 4, 2022Updated 4 years ago
- A small example of loading BOFs in Python with pure reflection☆19Jan 26, 2023Updated 3 years ago
- PIC lsass dumper using cloned handles☆596Oct 18, 2022Updated 4 years ago
- ☆171Dec 8, 2022Updated 3 years ago
- A proof-of-concept tool that attempts to retrieve the configuration from the memory dump of an F-Secure C3 Relay executable.☆16Jul 2, 2021Updated 5 years ago
- leaking net-ntlm with webdav☆28Feb 23, 2021Updated 5 years ago
- Password attacks and MFA validation against various endpoints in Azure and Office 365☆152Feb 10, 2023Updated 3 years ago
- DLL Hijack Search Order Enumeration BOF☆147Nov 3, 2021Updated 4 years ago
- Strstr with user-supplied needle and filename as a BOF.☆32Sep 27, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certifica…☆878Mar 20, 2023Updated 3 years ago
- Convert Cobalt Strike profiles to IIS web.config files☆114Aug 23, 2021Updated 5 years ago
- Remotely enables Restricted Admin Mode☆214Sep 3, 2021Updated 5 years ago
- A Beacon Object File (BOF) implementation of the 'cat' command☆26Feb 11, 2023Updated 3 years ago
- MiniDumpWriteDump behavior modification hook☆50Feb 15, 2021Updated 5 years ago
- Automate AV evasion by calling AMSI☆87May 31, 2023Updated 3 years ago
- WhoAmI by asking the LDAP service on a domain controller.☆67Feb 8, 2022Updated 4 years ago
- A BOF to interact with COM objects associated with the Windows software firewall.☆114Oct 10, 2021Updated 5 years ago
- Collection of remote authentication triggers in C#☆540May 15, 2024Updated 2 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- A proof-of-concept script to conduct a phishing attack abusing Microsoft 365 OAuth Authorization Flow☆107Aug 17, 2021Updated 5 years ago
- Iterative AD discovery toolkit for offensive operations☆84Mar 16, 2020Updated 6 years ago
- Tools for attacking Azure Function Apps☆89Oct 28, 2025Updated 11 months ago
- C# application that allows you to quick run SSH commands against a host or list of hosts☆42Sep 21, 2020Updated 6 years ago
- ☆188Jan 5, 2021Updated 5 years ago
- Another LSASS dumping tool that uses a dynamically compiled LSA plugin to grab an lsass handle and API hooking for capturing the dump in…☆273Mar 18, 2021Updated 5 years ago
- Azure JWT Token Manipulation Toolset☆737Dec 6, 2024Updated last year