Alternatives and similar repositories for ntlmthief

Users that are interested in ntlmthief are comparing it to the libraries listed below

• eversinc33 / CredGuess
  Generate password spraying lists based on the pwdLastSet-attribute of users.
  ☆56Updated last year
• myexploit / living_off_the_land
  ☆44Updated 11 months ago
• smokeme / ansible-havoc
  Scripts I use to deploy Havoc on Linode and setup categorization and SSL
  ☆40Updated last year
• OffsecDeer / TargetedTimeroast
  Tamper Active Directory user attributes to collect their hashes with MS-SNTP
  ☆38Updated 5 months ago
• danti1988 / adcshunter
  Uses rpcdump to locate the ADCS server, and identify if ESC8 is vulnerable from unauthenticated perspective.
  ☆81Updated 9 months ago
• LaresLLC / OffensiveSysAdmin
  A collection of tools Neil and Andy have been working on released in one place and interlinked with previous tools
  ☆88Updated last year
• 4ndr34z / prenum
  ☆28Updated 2 years ago
• foxlox / hypobrychium
  Duplicate not owned Token from Running Process
  ☆72Updated last year
• synacktiv / kcmdump
  Dump Kerberos tickets from the KCM database of SSSD
  ☆50Updated 9 months ago
• BC-SECURITY / ScriptBlock-Smuggling
  Example code samples from our ScriptBlock Smuggling Blog post
  ☆90Updated last year
• truerustyy / wcreddump
  Fully automated windows credentials dumper, for SAM (classic passwords) and WINHELLO (pins). Requires to be run from a linux machine with…
  ☆75Updated 7 months ago
• g0h4n / RDE1
  RDE1 (Rusty Data Exfiltrator) is client and server tool allowing auditor to extract files from DNS and HTTPS protocols written in Rust. �…
  ☆40Updated 2 months ago
• ASP4RUX / Invoke-AMSI
  ☆35Updated 6 months ago
• eversinc33 / Invoke-Pre2kSpray
  Enumerate domain machine accounts and perform pre2k password spraying.
  ☆70Updated last year
• MythicC2Profiles / discord
  Discord C2 Profile for Mythic
  ☆29Updated 4 months ago
• huntandhackett / PassiveAggression
  Source code and examples for PassiveAggression
  ☆61Updated last year
• Helixo32 / GetSystem-LCI
  GetSystem-LCI is a PowerShell script to escalate privileges from Administrator to NT AUTHORITY\SYSTEM by abusing LanguageComponentsInstal…
  ☆34Updated 6 months ago
• LuemmelSec / Moodle-Scanner
  A Moodle Scanner
  ☆42Updated 7 months ago
• x4sh3s / AMSI_Lines
  Bypass AMSI By Dividing files into multiple smaller files
  ☆45Updated 2 years ago
• SadProcessor / BloodHoundOperator
  BloodHound PowerShell client
  ☆56Updated 2 months ago
• p4p1 / havoc-ligolo
  A Havoc UI tool to pivot onto a machine using ligolo-ng
  ☆44Updated last year
• aleemladha / SANS-Workshop-Lab
  SANS Workshop: Active Directory Privilege Escalation with Empire!
  ☆30Updated 2 months ago
• dadevel / mssql-spider
  Automated exploitation of MSSQL servers at scale
  ☆108Updated this week
• mertdas / SharpLateral
  Lateral Movement
  ☆124Updated last year
• WafflesExploits / Bloodhound-query-legacy2ce
  A Python based tool to convert custom queries from Legacy BloodHound to BloodHound CE format, with the option to directly upload them to …
  ☆28Updated 5 months ago
• HernanRodriguez1 / Bypass-AMSI
  ☆47Updated 3 years ago
• Primusinterp / PrimusC2
  A C2 framework built for my bachelors thesis
  ☆55Updated 7 months ago
• VKo9 / AD-attacks-automation-scripts
  This repository contains scripts about ACL abuse and any other active directory attacking methods.
  ☆36Updated last year
• matro7sh / matro7sh_loaders
  this script adds the ability to encode shellcode (.bin) in XOR,chacha20, AES. You can choose between 2 loaders (Myph / 221b)
  ☆83Updated last year
• yehia-mamdouh / Shell3er
  PowerShell Reverse Shell
  ☆78Updated 2 years ago