Chris Thompson

SharpSCCM. A C# utility for interacting with SCCM

Maestro. Abusing Azure services over C2

ludus_sccm. An Ansible collection that installs an SCCM deployment with optional configurations.

maldocs. C#

Mayyhem.

scripts. Collection of one-off scripts that were useful at one time or another

impacket-winrm. Impacket is a collection of Python classes for working with network protocols.

FETCH. C#

EntraTokenAid. A pure PowerShell solution for Entra OAuth authentication, enabling easy retrieval of access and refresh tokens

ROADtools. A collection of Azure AD tools for offensive and defensive security purposes

adidnsdump. Active Directory Integrated DNS dumping by any authenticated user

ccmpwn. Python

BAADTokenBroker. PowerShell

SharpHound. C# Data Collector for BloodHound

ROADtoken. C#

RemoteKrbRelay. Remote Kerberos Relay made easy! Advanced Kerberos Relay Framework

KrbRelay-SMBServer. C#

pytune. Python

SCOMDecrypt. SCOMDecrypt is a tool to decrypt stored RunAs credentials from SCOM servers

Misconfiguration-Manager. Misconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive and hardening guidance.

payloads. JavaScript

SharpHoundCommon. Common library used by SharpHound.