Active Directory forensic framework
☆16May 18, 2026Updated 5 months ago
Alternatives and similar repositories for ntdsxtract
Users that are interested in ntdsxtract are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆37Sep 6, 2026Updated last month
- RingKiller — BYOD PoC for vulnerable driver DCRCVDrv.sys. Abuses IOCTL 0x2205C0 to kill arbitrary processes from ring 0 via ZwTerminatePr…☆26Sep 12, 2026Updated last month
- Cuban Eight is a red team tool that packages a Windows PE payload into a .wsl file spoofing a real Linux distro installer. Double-click t…☆26Oct 16, 2026Updated last week
- Reverse engineering analysis of PureRAT, a multi-stage RAT that executes via msbuild.exe and communicates with C2 servers at pure8s.ddnsf…☆16Sep 21, 2026Updated last month
- Cross-platform network execution toolkit (SMB/Kerberos/WMI/LDAP/DCSync) built on TrustedSec's Titanis - NetExec-style workflow in C#☆82Sep 18, 2026Updated last month
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Open Source implementation of PsPipeJack☆27May 27, 2026Updated 4 months ago
- Atomic test units for BOF execution☆62Apr 26, 2026Updated 5 months ago
- Dumping all keys from a keytab file☆21Dec 1, 2025Updated 10 months ago
- A Sliver C2 module for NetExec☆13Jun 14, 2026Updated 4 months ago
- A tool to abuse weak permissions of Active Directory Discretionary Access Control Lists (DACLs) and Access Control Entries (ACEs)☆64Feb 4, 2026Updated 8 months ago
- Process ID Mutator via BYOVD Kernel R/W☆20Sep 6, 2026Updated last month
- Test AMSI Provider implementation in C#☆45Dec 18, 2024Updated last year
- Cobalt Strike Aggressor Script for identifying security products on Windows hosts — six enumeration methods rated by noise level, from si…☆98Feb 6, 2026Updated 8 months ago
- Novel lateral movement and privilege escalation tool leveraging PowerShell named pipes. Allows for executing PowerShell commands over the…☆25Oct 8, 2026Updated 2 weeks ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- open source implementation of the UDC2 spec used in Cobalt Strike☆61Jul 4, 2026Updated 3 months ago
- ☆30Jul 24, 2026Updated 2 months ago
- Object file loader implemented as a post-ex DLL for asynchronous BOF execution.☆29Jul 23, 2026Updated 3 months ago
- PE-Audit its a Powershell script that check for windows privilege escalation vector☆13Aug 3, 2026Updated 2 months ago
- Rust based C2 Framework☆33Sep 29, 2026Updated 3 weeks ago
- DynLoader A modular Windows loader focused on EDR evasion Built with indirect syscall (Tartarus Gate / Hell’s Gate), Manual PE parsing …☆82Jul 10, 2026Updated 3 months ago
- WhatAboutSAM is my custom PoC of a Windows SAM dumper☆39Jul 4, 2026Updated 3 months ago
- Reimplementing Havoc Pro Runtime Channel Switching and Cobalt Strike UDC2 features.☆54Oct 11, 2026Updated last week
- Custom Adaptix-compatible C2 agent - PIC beacon + Stardust UDRL + Go extender plugins☆146Oct 4, 2026Updated 2 weeks ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Adaptix C2 extender to support Cobalt Strike Malleable C2 profiles☆54Jun 28, 2026Updated 3 months ago
- CnaEmulator is a standalone, general-purpose development, emulation, and testing harness for Cobalt Strike Aggressor Scripts (.cna)☆22Sep 20, 2026Updated last month
- A python proof of concept tool to assist in your payloads classification against EDR/AV's machine learning models☆37Oct 14, 2026Updated last week
- Modules designed to be used with the Conquest framework.☆22Sep 3, 2026Updated last month
- A C# PE loader for x64 and x86 PE files.☆57Mar 9, 2026Updated 7 months ago
- dcsync bof☆53Feb 13, 2026Updated 8 months ago
- template for developing custom C2 channels for Cobalt Strike using IAT hooks applied by a reflective loader.☆107Jan 10, 2026Updated 9 months ago
- SVG Steganography toolkit☆16Jun 18, 2026Updated 4 months ago
- Shellcode Loader for Master Thesis☆74Jul 5, 2026Updated 3 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- AD ACL Abuser for Havoc C2☆25Mar 30, 2026Updated 6 months ago
- Hidden Desktop Plugin For Havoc C2,Soon coming for Sliver.☆258Sep 29, 2026Updated 3 weeks ago
- Capture incoming TGTs in pure PowerShell to avoid using Rubeus☆30Mar 29, 2026Updated 6 months ago
- BOF POC of the DSCourier project / invoking WinGet via COM☆90Apr 23, 2026Updated 6 months ago
- Pentest Coverage Tracker is a Burp Suite extension that helps penetration testers monitor testing coverage in real time. It logs discover…☆47Mar 16, 2026Updated 7 months ago
- 渗透测试人员可以通过此BOF，将非托管 Windows可执行文件加载到Beacon内存中并执行它们，检索输出并将其呈现在 Beacon 控制台中☆13Mar 18, 2025Updated last year
- Example of call stack spoofing trough the construction of syntetic frames and stack manipulation☆43Jan 17, 2026Updated 9 months ago