Whisker

Credential manipulator

A tool for manipulating Active Directory user and computer accounts by adding shadow credentials.

Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding "Shadow Credentials" to the target account.

GitHub

824 stars
10 watching
100 forks
Language: C#
last commit: almost 2 years ago
Linked from 1 awesome list


Backlinks from these awesome lists:

Related projects:

RepositoryDescriptionStars
f3eev/sharkexecA C# toolkit designed to extract credentials and browsing history from Windows systems.295
fugue/credstashA tool for managing and distributing sensitive credentials securely using AWS KMS and DynamoDB.2,061
marcwebbie/passpieA command-line tool to manage and store login credentials securely using encryption.921
makethunder/awsudoA utility to manage AWS credentials and automate key rotation and role switching180
dirkjanm/adconnectdumpA tool suite to extract and decrypt sensitive Azure AD credentials from Azure AD Connect servers641
ryhanson/phisheryPhishery is an HTTP server designed to harvest Basic Auth credentials and inject URLs into Word documents.980
tokyoneon/credphishA PowerShell script designed to collect user passwords and exfiltrate them via DNS287
ben0xa/honeycredsDetects network credential injection attempts by simulating legitimate credentials215
wjakob/filesystemA lightweight class for manipulating paths on Linux/Windows/Mac OS245
adroll/hologramA system that allows developers to easily access AWS credentials on their laptops without having them in their source code803
b4rtik/sharpkatzA porting of mimikatz commands for Windows credential extraction and manipulation983
dafthack/msolsprayA tool that simulates password login attempts to Azure accounts, logging relevant information such as account status and error codes.918
djhohnstein/sharpwebA .NET project that extracts saved browser credentials from Google Chrome, Firefox, and Internet Explorer/Edge.514
ustayready/credkingA tool that automates password spraying using AWS Lambda across multiple regions and IP addresses.579
d4vinci/elpscrkA password generator tool based on user profiling and statistics793