Authentication

ccob/lsarelayx

System-wide NTLM relay tool that hooks Windows authentication APIs to relay incoming NTLM connections, downgrade Kerberos, and dump NetNTLM hashes…

shutdownrepo/smartbrute

Password spraying and bruteforcing tool for Active Directory Domain Services

zblurx/certsync

Dump NTDS with golden certificates and UnPAC the hash

cyberark/riskyspn

Detect and abuse risky SPNs

quickbreach/exchangerelayx

An NTLM relay tool to the EWS endpoint for on-premise exchange servers. Provides an OWA for hackers.

secureworks/squarephish

Advanced phishing tool combining OAuth Device Code authentication flow with QR codes to harvest Microsoft authentication tokens via MFA update…

cyrusimap/cyrus-sasl

Cyrus SASL API implementation providing client- and server-side authentication and authorization services via pluggable SASL mechanisms per RFC 4422.

sigstore/root-signing

Maintains the TUF repository that securely delivers the Sigstore trust root (trusted_root.json) to clients, using keyholder threshold signing, KMS…

pwnfoo/ntlmrecon

Enumerate information from NTLM authentication enabled web endpoints 🔎

fjrevoredo/mini-diarium

A local-only journal with serious encryption. Free, open source, and never touches the internet.

mzhmo/powershellkerberos

Some scripts to abuse kerberos using Powershell

fox-it/cve-2019-1040-scanner

SMB vulnerability scanner that detects CVE-2019-1040 by sending invalid NTLM authentication packets, enabling MIC Remove relay attacks for domain…

wh0amitz/krbuacbypass

Abuses Kerberos tickets to bypass Windows UAC and gain SYSTEM privileges by injecting a fake MachineID into service tickets, leveraging the tgtdeleg…

synwall/synwall

Linux kernel module implementing a zero-configuration, OTP-based firewall for IoT devices. Transparently authenticates network traffic using a…

mr-un1k0d3r/azureredops

Azure RedOps is a offensive security toolkit for assessing the security posture of Microsoft Entra ID

dun/munge

Authentication service for creating and validating tamper-proof user credentials in HPC cluster environments, with a portable API and no root…

juliangruber/keypair

Generate a RSA PEM key pair from pure JS

s3cur3th1ssh1t/sharpnamedpipepth

Pass the Hash to a named pipe for token Impersonation