☆128Jun 17, 2025Updated last year
Alternatives and similar repositories for BAADTokenBroker
Users that are interested in BAADTokenBroker are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Request device ticket/token using the device's MSA☆37Aug 25, 2025Updated last year
- tool for requesting Entra ID's P2P certificate and authenticating to a remote Entra joinned devices with it☆135Aug 23, 2025Updated last year
- A pure PowerShell solution for Entra OAuth authentication, enabling easy retrieval of access and refresh tokens☆151Apr 9, 2026Updated 5 months ago
- TokenSmith generates Entra ID access & refresh tokens on offensive engagements. It is suitable for both covert adversary simulations and …☆422Jan 23, 2025Updated last year
- A tool leveraging Kerberos tickets to get Microsoft 365 access tokens using Seamless SSO☆249Aug 25, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A comprehensive list of usable Entra ID first-party clients with pre-consented Microsoft Graph scopes, in a simple YAML-file explorable w…☆168Mar 20, 2026Updated 5 months ago
- ☆297Aug 14, 2025Updated last year
- A fork of the great TokenTactics with support for CAE and token endpoint v2☆458Updated this week
- Simple pure PowerShell POC to bypass Entra / Intune Compliance Conditional Access Policy☆170Nov 17, 2025Updated 10 months ago
- ☆238Aug 18, 2026Updated last month
- Local SYSTEM auth trigger for relaying☆173Jul 22, 2025Updated last year
- Research into Undocumented Behavior of Azure AD Refresh Tokens☆369Feb 23, 2024Updated 2 years ago
- Random BOFs for LDAP tradecraft☆72Sep 9, 2025Updated last year
- Disconnected RSAT - A method of running Group Policy Manager, Certificate Authority and Certificate Templates MMC snap-ins from non-domai…☆310Mar 28, 2026Updated 5 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Lateral Movement as loggedon User via Speech Named Pipe COM & ISpeechNamedPipe + COM Hijacking☆150Jul 2, 2025Updated last year
- Python3 rewrite of AsOutsider features of AADInternals☆62Jul 23, 2025Updated last year
- ☆199Mar 28, 2025Updated last year
- The DCERPC only printerbug.py version☆234Oct 30, 2025Updated 10 months ago
- SCCMSecrets.py aims at exploiting SCCM policies distribution for credentials harvesting, initial access and lateral movement.☆280Aug 30, 2026Updated 2 weeks ago
- Client-side Encrypted Upload Server Python Script☆68Jul 10, 2025Updated last year
- Abusing Azure services over C2☆382Jan 20, 2026Updated 7 months ago
- CAPSlock is an offline Conditional Access (CA) analysis tool built on top of a roadrecon database. It helps defenders, auditors, and red …☆95May 16, 2026Updated 4 months ago
- SCEP request tool for AD CS and Intune☆77Oct 24, 2025Updated 10 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Ludus roles to deploy ASR rules and MDI auditing settings☆25Aug 5, 2025Updated last year
- Azure Post Exploitation Framework☆248Oct 27, 2025Updated 10 months ago
- ☆166Jan 27, 2025Updated last year
- MaLDAPtive is a framework for LDAP SearchFilter parsing, obfuscation, deobfuscation and detection.☆350Aug 7, 2024Updated 2 years ago
- BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions☆361Nov 19, 2024Updated last year
- ☆160Dec 14, 2023Updated 2 years ago
- A dotnet executable to get an Entra token in an authenticated runtime☆17Oct 30, 2024Updated last year
- DLL proxy load example using the Windows thread pool API, I/O completion callback with named pipes, and C++/assembly☆66Mar 19, 2024Updated 2 years ago
- A flexible proxy for inspecting & transforming LDAP packets generated by any tool on the fly.☆239Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A Python POC for CRED1 over SOCKS5☆172Oct 5, 2024Updated last year
- ☆33Mar 26, 2026Updated 5 months ago
- ☆166Apr 17, 2024Updated 2 years ago
- SharpExShell automates the DCOM lateral movment technique which abuses ActivateMicrosoftApp method of Excel application.☆73May 1, 2024Updated 2 years ago
- Lateral movement with DCOM DLL hijacking☆183Jul 4, 2025Updated last year
- modified mssqlclient from impacket to extract policies from the SCCM database☆49Feb 24, 2026Updated 6 months ago
- ☆50Dec 5, 2025Updated 9 months ago