Request a service ticket from a foreign DC using an inter-realm TGT, for cross-realm cases Impacket's getST.py mishandles
☆10Aug 4, 2026Updated 2 months ago
Alternatives and similar repositories for Cross-Realm-TGS
Users that are interested in Cross-Realm-TGS are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An OpenGraph extension for secrets☆23Aug 11, 2026Updated 2 months ago
- Patchless AMSI + ETW bypass via PAGE_GUARD exceptions and Vectored Exception Handler (VEH)☆17Mar 24, 2026Updated 7 months ago
- tool to extract LSA credentials using a vulnerable microsoft signed windows defender driver in a stealthy manner☆19Apr 12, 2026Updated 6 months ago
- ☆32Jun 1, 2026Updated 4 months ago
- Printer exploitation framework for penetration testing. Discovers printers via PJL scanning, checks for default credentials, and extracts…☆23Oct 8, 2026Updated 3 weeks ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- NTLM HTTP relay tool with SOCKS proxy for browser session hijacking☆192Apr 6, 2026Updated 6 months ago
- Proof-of-Concept tool to dump trusted domain objects☆47May 14, 2026Updated 5 months ago
- ☆31Oct 22, 2026Updated last week
- A Python library for creating BloodHound OpenGraph JSON data☆14Nov 6, 2025Updated 11 months ago
- BAADTokenBroker is a post-exploitation tool designed to interact with Microsoft Entra ID device-bound keys.☆82Apr 11, 2026Updated 6 months ago
- SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Dire…☆32May 30, 2024Updated 2 years ago
- wtftp.py is a tool to attack Microsoft Deployment Toolkit (MDT) and Windows Deployment Services (WDS).☆45Jan 22, 2026Updated 9 months ago
- An advanced data pipeline engine for the BloodHound OpenGraph framework☆19Apr 11, 2026Updated 6 months ago
- Cobalt Strike Beacon Object File to enable the webdav client service on x64 windows hosts☆27Sep 15, 2023Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Audit your Google Cloud Platform (GCP) project for LIST permissions — fast, efficient, and with visibility.☆14May 7, 2025Updated last year
- macOS dylib stager☆36Jan 22, 2025Updated last year
- Extract PRT cookies remotely with InteractiveToken Scheduled Tasks☆15Aug 13, 2026Updated 2 months ago
- AuthStrike is an identity and authentication security testing tool for controlled simulations, security research, and education purpose o…☆20Sep 9, 2026Updated last month
- A small collector to model out abusable Seamless Single Sign On edges☆15Feb 11, 2026Updated 8 months ago
- A tunneling toolkit enabling operators to move data from one place to another evasively.☆84Oct 24, 2026Updated last week
- A Sliver C2 module for NetExec☆13Jun 14, 2026Updated 4 months ago
- Sleep Obfuscation via CreateThreadpoolTimer☆24Jul 27, 2026Updated 3 months ago
- A collection of DPAPI hunting and parsing BOFs☆39Mar 3, 2026Updated 7 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- A simple C++ Windows tool to get information about processes exposing named pipes.☆42Mar 6, 2025Updated last year
- Agent Linux for AdaptixC2☆25Updated this week
- Automatically scan the file system to identify Electron applications vulnerable to ASAR tampering.☆165Nov 28, 2025Updated 11 months ago
- Weaponizing DCOM for NTLM Authentication Coercions☆217Nov 4, 2025Updated 11 months ago
- Run CobaltStrike aggressorscript over TCP☆16Feb 9, 2026Updated 8 months ago
- ☆12Oct 2, 2022Updated 4 years ago
- LSASS enumeration like pypykatz written in C-Lang☆20Dec 1, 2021Updated 4 years ago
- TXT and PDF documents from the NSA☆16Mar 24, 2015Updated 11 years ago
- Pure-impacket parallel local-admin discovery via RBCD.☆47Oct 9, 2026Updated 3 weeks ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Rust rewrite of nanodump, a low-level LSASS memory dumping tool.☆16Feb 22, 2026Updated 8 months ago
- For testing or trolling LLM based pentesting frameworks.☆20Feb 18, 2026Updated 8 months ago
- POC tool for ResetNightmare (CVE-2026-27912)☆223Aug 20, 2026Updated 2 months ago
- Threadless Injection Payload Toolkit☆12Oct 12, 2023Updated 3 years ago
- RingKiller — BYOD PoC for vulnerable driver DCRCVDrv.sys. Abuses IOCTL 0x2205C0 to kill arbitrary processes from ring 0 via ZwTerminatePr…☆26Sep 12, 2026Updated last month
- A Python POC for CRED1 over SOCKS5☆173Oct 5, 2024Updated 2 years ago
- Crystal port of GodPotato to abuse SeImpersonatePrivilege with indirect syscalls, dynamic API resolution and compile-time string obfuscat…☆128Aug 22, 2026Updated 2 months ago