Authentication

grayddq/eburst

这个脚本主要提供对Exchange邮件服务器的账户爆破功能，集成了现有主流接口的爆破方式。

synacktiv/ouned

The OUned project automating Active Directory Organizational Units ACL exploitation through gPLink poisoning

mgeeky/azurert

AzureRT - A Powershell module implementing various Azure Red Team tactics

synacktiv/prox-ez

HTTP/HTTPS interception proxy for testing Windows authentication mechanisms, supporting NTLM, Kerberos, pass-the-hash, pass-the-ticket and relay…

logangoins/cable

.NET post-exploitation toolkit for Active Directory reconnaissance and exploitation

jumpseclabs/tokenflare

Serverless AITM Simulation Framework for Entra ID and M365

3lp4tr0n/remotemonologue

Weaponizing DCOM for NTLM Authentication Coercions

maaaaz/crackmapexecwin

The great CrackMapExec tool compiled for Windows

libssh/libssh-mirror

C library implementing the SSH protocol for secure remote access, authentication, and encrypted communication. Includes fuzzing support via OSS-Fuzz…

redbyte1337/credspy

Entra ID user enumeration and auth method discovery via the public GetCredentialType API

horizon3ai/cve-2022-1388

POC for CVE-2022-1388

jb-selfcompany/tyr

True P2P Email on top of Yggdrasil Network for Android

greatscott/enject

enject: Hide .env secrets from prAIng eyes: secrets live in local encrypted stores (per project) and are injected directly into apps at runtime,…

synacktiv/dcomillusionist

DCOM in memory and fileless lateral movement techniques through .Net deserilization

cyberark/ketshash

A little tool for detecting suspicious privileged NTLM connections, in particular Pass-The-Hash attack, based on event viewer logs.

tyranid/blackhat-usa-2022-demos

Demos for the Blackhat USA 2022 talk "Taking Kerberos to the Next Level"