Whisker

Credential manipulator

A tool for manipulating Active Directory user and computer accounts by adding shadow credentials.

Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding "Shadow Credentials" to the target account.

GitHub

813 stars
10 watching
99 forks
Language: C#
last commit: 10 days ago
Linked from 1 awesome list


Backlinks from these awesome lists:

Related projects:

Repository Description Stars
f3eev/sharkexec A C# toolkit designed to extract credentials and browsing history from Windows systems. 295
fugue/credstash A tool for managing and distributing sensitive credentials securely using AWS KMS and DynamoDB. 2,059
marcwebbie/passpie A command-line tool to manage and store login credentials securely using encryption. 919
makethunder/awsudo A utility to manage AWS credentials and automate key rotation and role switching 180
dirkjanm/adconnectdump A tool suite to extract and decrypt sensitive Azure AD credentials from Azure AD Connect servers 618
ryhanson/phishery Phishery is an HTTP server designed to harvest Basic Auth credentials and inject URLs into Word documents. 977
tokyoneon/credphish A PowerShell script designed to collect user passwords and exfiltrate them via DNS 285
ben0xa/honeycreds Detects network credential injection attempts by simulating legitimate credentials 214
wjakob/filesystem A lightweight class for manipulating paths on Linux/Windows/Mac OS 243
adroll/hologram A system that allows developers to easily access AWS credentials on their laptops without having them in their source code 803
b4rtik/sharpkatz A porting of mimikatz commands for Windows credential extraction and manipulation 974
dafthack/msolspray A tool that simulates password login attempts to Azure accounts, logging relevant information such as account status and error codes. 911
djhohnstein/sharpweb A .NET project that extracts saved browser credentials from Google Chrome, Firefox, and Internet Explorer/Edge. 510
ustayready/credking A tool that automates password spraying using AWS Lambda across multiple regions and IP addresses. 578
d4vinci/elpscrk A password generator tool based on user profiling and statistics 788