Active Directory forensic framework
☆16May 18, 2026Updated 5 months ago
Alternatives and similar repositories for ntdsxtract
Users that are interested in ntdsxtract are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Open Source implementation of PsPipeJack☆27May 27, 2026Updated 5 months ago
- Evasive fork of Donut to generate position-independent shellcode that loads PE Windows payloads from memory☆47Updated this week
- In-process Kerberos user enumeration and password attacks for AdaptixC2 — no process spawn, no file drop.☆17Sep 27, 2026Updated last month
- Reverse engineering analysis of PureRAT, a multi-stage RAT that executes via msbuild.exe and communicates with C2 servers at pure8s.ddnsf…☆19Sep 21, 2026Updated last month
- ☆37Sep 6, 2026Updated 2 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- RingKiller — BYOD PoC for vulnerable driver DCRCVDrv.sys. Abuses IOCTL 0x2205C0 to kill arbitrary processes from ring 0 via ZwTerminatePr…☆26Sep 12, 2026Updated 2 months ago
- Python scripts that helps in the development of PPKG binaries☆17Jul 31, 2026Updated 3 months ago
- Map every segment you can reach (VLANs, firewall zones, subnets), then find out which of them can actually talk to each other.☆18Nov 5, 2026Updated last week
- Atomic test units for BOF execution☆62Apr 26, 2026Updated 6 months ago
- Cuban Eight is a red team tool that packages a Windows PE payload into a .wsl file spoofing a real Linux distro installer. Double-click t…☆33Oct 16, 2026Updated 3 weeks ago
- A curated list of red team tools, C2 frameworks, and adversary simulation resources for offensive security professionals.☆27Oct 9, 2026Updated last month
- Dumping all keys from a keytab file☆21Dec 1, 2025Updated 11 months ago
- Tunneling tool for red teaming, designed to run in memory on a windows target and connect back to a Linux VPS so you can proxy tools into…☆54Aug 3, 2026Updated 3 months ago
- A tool to abuse weak permissions of Active Directory Discretionary Access Control Lists (DACLs) and Access Control Entries (ACEs)☆64Feb 4, 2026Updated 9 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Test AMSI Provider implementation in C#☆45Dec 18, 2024Updated last year
- Cobalt Strike Aggressor Script for identifying security products on Windows hosts — six enumeration methods rated by noise level, from si…☆97Feb 6, 2026Updated 9 months ago
- Object file loader implemented as a post-ex DLL for asynchronous BOF execution.☆29Jul 23, 2026Updated 3 months ago
- A Sliver C2 module for NetExec☆14Nov 3, 2026Updated last week
- DynLoader A modular Windows loader focused on EDR evasion Built with indirect syscall (Tartarus Gate / Hell’s Gate), Manual PE parsing …☆82Jul 10, 2026Updated 4 months ago
- open source implementation of the UDC2 spec used in Cobalt Strike☆62Jul 4, 2026Updated 4 months ago
- ☆31Jul 24, 2026Updated 3 months ago
- Handle Redirect via BYOVD Kernel Read/Write☆22Sep 13, 2026Updated last month
- Process ID Mutator via BYOVD Kernel R/W☆22Sep 6, 2026Updated 2 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- ☆25Oct 27, 2026Updated 2 weeks ago
- PE-Audit its a Powershell script that check for windows privilege escalation vector☆13Aug 3, 2026Updated 3 months ago
- Modules designed to be used with the Conquest framework.☆22Sep 3, 2026Updated 2 months ago
- A C# PE loader for x64 and x86 PE files.☆57Mar 9, 2026Updated 8 months ago
- Reimplementing Havoc Pro Runtime Channel Switching and Cobalt Strike UDC2 features.☆57Oct 11, 2026Updated last month
- Rust based C2 Framework☆35Sep 29, 2026Updated last month
- template for developing custom C2 channels for Cobalt Strike using IAT hooks applied by a reflective loader.☆107Jan 10, 2026Updated 10 months ago
- Steal Net-NTLMv1 hashes for logged on users without dumping LSASS☆16May 11, 2026Updated 6 months ago
- dcsync bof☆54Feb 13, 2026Updated 8 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- AD ACL Abuser for Havoc C2☆24Mar 30, 2026Updated 7 months ago
- WhatAboutSAM is my custom PoC of a Windows SAM dumper☆50Oct 25, 2026Updated 2 weeks ago
- Capture incoming TGTs in pure PowerShell to avoid using Rubeus☆30Mar 29, 2026Updated 7 months ago
- BOF POC of the DSCourier project / invoking WinGet via COM☆90Apr 23, 2026Updated 6 months ago
- ☆28Oct 23, 2026Updated 2 weeks ago
- Public talks, workshops and research presentations from BlackArrow☆28Jul 30, 2026Updated 3 months ago
- Adaptix C2 extender to support Cobalt Strike Malleable C2 profiles☆57Jun 28, 2026Updated 4 months ago
Are these results useful?