#1MFA, SSO, passwordless, biometric, and identity provider tools.
Kitploit recommended
trustedsec/titanisWindows protocol library, including SMB and RPC implementations, among others.
paragonie/haliteHigh-level cryptography interface powered by libsodium
mverschu/cve-2025-33073PoC Exploit for the NTLM reflection SMB flaw.
wh04m1001/dfscoerceProof-of-concept tool that coerces Windows authentication via MS-DFSNM NetrDfsRemoveStdRoot and NetrDfsAddStdRoot methods for credential relay…
rvrsh3ll/tokentacticsAzure JWT Token Manipulation Toolset
ghostpack/forgecertForge certificates for Active Directory authentication using stolen Certificate Authority private keys, enabling persistent domain access with forged…
cube0x0/sharpmapexecWindows-native penetration testing swiss army knife for lateral movement, credential access, data exfiltration, and vulnerability scanning across…
ustayready/credkingPassword spraying using AWS Lambda for IP rotation
anatol/boosterFast and secure initramfs generator
lmammino/jwt-crackerSimple HS256, HS384 & HS512 JWT token brute force cracker.
benjojo/totp-ssh-fluxerTake security by obscurity to the next level (this is a bad idea, don't really use this please)
f-bader/tokentacticsv2A fork of the great TokenTactics with support for CAE and token endpoint v2
cicada8-research/remotekrbrelayRemote Kerberos Relay made easy! Advanced Kerberos Relay Framework
dev-2null/adcollectorA lightweight tool to quickly extract valuable information from the Active Directory environment for both attacking and defending.
skahwah/sqlreconA C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.
ralfhacker/kerbeus-bofBOF for Kerberos abuse (an implementation of some important features of the Rubeus).
