sensepost / mail-in-the-middle
☆103Updated 2 weeks ago
Related projects ⓘ
Alternatives and complementary repositories for mail-in-the-middle
- Active Directory data ingestor for BloodHound Community Edition written in Rust. 🦀☆104Updated last month
- A Kerberos AP-REQ hijacking tool with DNS unsecure updates abuse.☆94Updated 5 months ago
- ☆143Updated 8 months ago
- RedInfraCraft automates the deployment of powerful red team infrastructures! It streamlines the setup of C2s, makes it easy to create adv…☆91Updated last week
- Automated exploitation of MSSQL servers at scale☆82Updated this week
- Continuous password spraying tool☆117Updated this week
- The BackupOperatorToolkit contains different techniques allowing you to escalate from Backup Operator to Domain Admin☆166Updated last year
- Uses rpcdump to locate the ADCS server, and identify if ESC8 is vulnerable from unauthenticated perspective.☆78Updated 2 months ago
- ☆112Updated last year
- PowerShell Reverse Shell☆61Updated last year
- Introductory guide on the configuration and subsequent exploitation of Active Directory Certificate Services with Certipy. Based on the w…☆88Updated last year
- Enumerate valid users within Microsoft Teams and OneDrive with clean output.☆58Updated last month
- A collection of tools Neil and Andy have been working on released in one place and interlinked with previous tools☆85Updated last year
- ACL abuse swiss-knife☆117Updated last year
- Scraping Kit is made up of several tools for scraping services for keywords, useful for initial enumeration of Domain Controllers or if y…☆96Updated last year
- Interactive Shell and Command Execution over Named-Pipes (SMB) for Fileless lateral movement☆108Updated last month
- Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel☆147Updated 3 weeks ago
- A tool for carrying out brute force attacks against Office 365, with built in IP rotation use AWS gateways.☆74Updated 5 months ago
- A password guessing tool that targets the Kerberos and LDAP services within the Windows Active Directory environment.☆35Updated 8 months ago
- C# implementation of TokenFinder. Steal M365 access tokens from Office Desktop apps☆133Updated 4 months ago
- Lateral Movement☆119Updated last year
- Inject RDPThief into memory with PowerShell.☆55Updated last month
- A collection of Cobalt Strike Aggressor scripts.☆85Updated 2 years ago
- Abuse Azure API permissions for red teaming☆58Updated last year
- ShuckNT is the script of Shuck.sh online service for on-premise use. It is design to dowgrade, convert, dissect and shuck authentication …☆64Updated last month
- A Python POC for CRED1 over SOCKS5☆134Updated last month
- linikatz is a tool to attack AD on UNIX☆138Updated last year
- Snaffler reimplementation in Python - https://github.com/SnaffCon/Snaffler☆88Updated 3 weeks ago
- Slinky Cat attempts to give users an easy-to-navigate menu offering predefined Active Directory Service Interfaces (ADSI) and .NET querie…☆79Updated last year
- Living off the land searches for explorer and sharepoint☆53Updated 3 weeks ago