POC of SecureWorks' recent Azure Active Directory password brute-forcing vuln
☆193Sep 29, 2021Updated 4 years ago
Alternatives and similar repositories for aad-sso-enum-brute-spray
Users that are interested in aad-sso-enum-brute-spray are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Brute force attack tool for Azure AD Autologon/Seamless SSO - Source: https://arstechnica.com/information-technology/2021/09/new-azure-ac…☆107Jun 27, 2024Updated 2 years ago
- Spray a hash via smb to check for local administrator access☆143Feb 7, 2021Updated 5 years ago
- User enumeration and password bruteforce on Azure, ADFS, OWA, O365, Teams and gather emails on Linkedin☆493Sep 24, 2025Updated 11 months ago
- Convert Cobalt Strike profiles to IIS web.config files☆114Aug 23, 2021Updated 5 years ago
- .NET Project for Attacking vCenter☆557Nov 11, 2021Updated 4 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- retrieve information via O365 and AzureAD with a valid cred☆746Aug 14, 2022Updated 4 years ago
- DLL Hijack Search Order Enumeration BOF☆148Nov 3, 2021Updated 4 years ago
- Finding all things on-prem Microsoft for password spraying and enumeration.☆259May 17, 2022Updated 4 years ago
- Azure JWT Token Manipulation Toolset☆736Dec 6, 2024Updated last year
- ☆100Aug 23, 2021Updated 5 years ago
- Remotely enables Restricted Admin Mode☆214Sep 3, 2021Updated 5 years ago
- A tool for checking if MFA is enabled on multiple Microsoft Services☆1,696Apr 13, 2026Updated 4 months ago
- C# tool for installing a shared network printer abusing the PrinterNightmare bug to allow other network machines easy privesc!☆181Aug 4, 2021Updated 5 years ago
- Macro-Enabled Excel File Generator (.xlsm) using the EPPlus Library.☆151Sep 7, 2020Updated 6 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- DLL Exports Extraction BOF with optional NTFS transactions.☆92Nov 5, 2021Updated 4 years ago
- ☆93Aug 23, 2021Updated 5 years ago
- ☆262Apr 10, 2023Updated 3 years ago
- GhostBuild is a collection of simple MSBuild launchers for various GhostPack/.NET projects☆252Sep 26, 2020Updated 5 years ago
- NTLM relaying for Windows made easy☆586Apr 25, 2023Updated 3 years ago
- A quick handy script to harvest credentials off of a user during a Red Team and get execution of a file from the user☆254Mar 7, 2022Updated 4 years ago
- Proof of Concept in Go from Secureworks' research on Azure Active Directory Brute-Force Attacks. Inspired by @treebuilder's POC on PowerS…☆14Feb 23, 2022Updated 4 years ago
- Iterative AD discovery toolkit for offensive operations☆84Mar 16, 2020Updated 6 years ago
- Tooling related to the WAM Bam - Recovering Web Tokens From Office blog post☆132Jan 14, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- credential dump using foreshaw technique using SeTrustedCredmanAccessPrivilege☆124May 22, 2021Updated 5 years ago
- Multi-thread AzureAD Autologon SSO Password Sprayer.☆37Oct 9, 2021Updated 4 years ago
- official repo for the AdHuntTool (part of the old RedTeamCSharpScripts repo)☆234Jun 10, 2022Updated 4 years ago
- A faithful transposition of the key features/functionality of @itm4n's PPLDump project as a BOF.☆142Sep 24, 2021Updated 4 years ago
- A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certifica…☆878Mar 20, 2023Updated 3 years ago
- Azure Outlook Command & Control (C2) - Remotely control a compromised Windows Device from your Outlook mailbox. Threat Emulation Tool for…☆502May 16, 2023Updated 3 years ago
- Collection of tools to use with Azure Applications☆113Oct 13, 2023Updated 2 years ago
- Proof-of-concept obfuscation toolkit for C# post-exploitation tools☆434Jul 22, 2022Updated 4 years ago
- Tools for Kerberos PKINIT and relaying to AD CS☆930Jan 3, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling☆1,292Mar 19, 2025Updated last year
- ☆39Sep 26, 2022Updated 3 years ago
- Information released publicly by NCC Group's Full Spectrum Attack Simulation (FSAS) team.☆609Aug 5, 2022Updated 4 years ago
- ADCS abuser☆326Feb 6, 2023Updated 3 years ago
- A tool for pointesters to find candies in SharePoint☆289Nov 4, 2022Updated 3 years ago
- WhoAmI by asking the LDAP service on a domain controller.☆67Feb 8, 2022Updated 4 years ago
- A toolkit to attack Office365☆1,120Nov 6, 2020Updated 5 years ago