synacktiv / Invoke-RunAsWithCertLinks
A PowerShell script to perform PKINIT authentication with the Windows API from a non domain-joined machine.
☆169Updated last year
Alternatives and similar repositories for Invoke-RunAsWithCert
Users that are interested in Invoke-RunAsWithCert are comparing it to the libraries listed below
Sorting:
- ☆160Updated last year
- Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) shares via HTTP(s)☆206Updated last year
- Hybrid AD utilities for ROADtools☆106Updated 8 months ago
- Disconnected RSAT - A method of running Group Policy Manager, Certificate Authority and Certificate Templates MMC snap-ins from non-domai…☆272Updated last year
- IronSharpPack is a repo of popular C# projects that have been embedded into IronPython scripts that execute an AMSI bypass and then refle…☆118Updated last year
- ☆216Updated last year
- ☆234Updated last year
- PowerShell toolkit that extracts locked Windows files (SAM, SYSTEM, NTDS, ...) using MFT parsing and raw disk reads☆238Updated 3 months ago
- A Python POC for CRED1 over SOCKS5☆163Updated last year
- pysnaffler☆110Updated 3 weeks ago
- comprehensive .NET tool designed to extract and display detailed information about Windows Defender exclusions and Attack Surface Reducti…☆212Updated last year
- Flexible LDAP proxy that can be used to inspect & transform all LDAP packets generated by other tools on the fly.☆186Updated last month
- BloodHound PowerShell client☆76Updated last month
- ☆229Updated 7 months ago
- Python utility that generates "imageless" QR codes in various formats☆135Updated last year
- ☆94Updated last month
- Two in one, patch lifetime powershell console, no more etw and amsi!☆102Updated 9 months ago
- C# implementation of TokenFinder. Steal M365 access tokens from Office Desktop apps☆144Updated last year
- A python tool to map the access rights of network shares into a BloodHound OpenGraphs easily☆252Updated last month
- The DCERPC only printerbug.py version☆200Updated 3 months ago
- Weaponizing DCOM for NTLM Authentication Coercions☆192Updated 3 months ago
- SOAPy is a Proof of Concept (PoC) tool for conducting offensive interaction with Active Directory Web Services (ADWS) from Linux hosts.☆158Updated last week
- Local SYSTEM auth trigger for relaying☆168Updated 6 months ago
- A Python based tool to convert custom queries from Legacy BloodHound to BloodHound CE format, with the option to directly upload them to …☆34Updated 4 months ago
- An Ansible collection that installs an SCCM deployment with optional configurations.☆101Updated last month
- Weaponizing DCOM for NTLM Authentication Coercions☆275Updated 7 months ago
- Tool for viewing NTDS.dit☆191Updated 10 months ago
- SCCMSecrets.py aims at exploiting SCCM policies distribution for credentials harvesting, initial access and lateral movement.☆259Updated 2 months ago
- This is a novel technique that leverages the well-known Device Code phishing approach. It dynamically initiates the flow when the victim …☆182Updated 4 months ago
- Parses Snaffler output file and generate beautified outputs.☆132Updated last month