#1Tools for creating fake identities, spoofing communications, and impersonating targets for social engineering.
Kitploit recommended
otterhacker/m365pwnedTwo WinForms GUI tools for enumerating, searching, and exfiltrating data from M365 environments using application-level OAuth tokens
s1ckb0y1337/tokenplayerManipulating and Abusing Windows Access Tokens.
s3cur3th1ssh1t/namedpipepthPass the Hash to a named pipe for token Impersonation
rotarydrone/globalunprotectDecrypt GlobalProtect configuration and cookie files.
syss-research/clone-certSimple shell script to "clone" X.509 certificates
hackerxphantom/spoof_anymailMost Powerful Send Fake Mail Using Any Mail I'd undetectable
synacktiv/prox-ezHTTP/HTTPS interception proxy for testing Windows authentication mechanisms, supporting NTLM, Kerberos, pass-the-hash, pass-the-ticket and relay…
decoder-it/tokenstealerWindows token manipulation utility that lists, steals, and impersonates process or user tokens to execute commands as other users, leveraging…
n3rada/mssqlandIn-target C# post-exploitation tool for Microsoft SQL Server (MS SQL / MSSQL) traversing linked-server chains of any depth with cascading login…
quentinhardy/pytmipePython library and client for token manipulations and impersonations for privilege escalation on Windows
zblurx/impersonate-rsRusty Impersonate
nccgroup/droppedconnectionEmulates a Cisco ASA Anyconnect VPN service for credential harvesting and VBS payload delivery in red team phishing operations.
rasta-mouse/spawnwithCobalt Strike BOF that spawns a process using another user's token and injects Beacon shellcode, enabling post-exploitation and lateral movement via…
rweijnen/createdumpLeverage WindowsApp createdump tool to obtain an lsass dump
trustedsec/reelPhishing simulation and awareness framework for node-based campaigns, credential capture, SMTP delivery, CAPTCHA, and optional browser credential…
sfewer-r7/cve-2026-55040Proof-of-concept exploit for Microsoft SharePoint CVE-2026-55040 that forges JWT tokens, bypasses authentication, auto-discovers metadata, and…
pwardle/not-a-musedProof-of-concept exploiting an undocumented Muse dictation endpoint setting, letting a local unprivileged process redirect dictation traffic to…
