Alternatives and similar repositories for OWASSRF

Users that are interested in OWASSRF are comparing it to the libraries listed below

• Qazeer / FarsightAD
  PowerShell script that aim to help uncovering (eventual) persistence mechanisms deployed by a threat actor following an Active Directory …
  ☆94Updated last year
• amjcyber / EDRNoiseMaker
  Detect WFP filters blocking EDR communications
  ☆89Updated last year
• MazX0p / ThreatHound
  ☆160Updated last year
• QueenSquishy / plague
  Default Detections for EDR
  ☆96Updated last year
• Hagrid29 / AbuseAzureAPIPermissions
  Abuse Azure API permissions for red teaming
  ☆67Updated 2 years ago
• Cyb3r-Monk / ACCD
  Active C&C Detector
  ☆154Updated last year
• lkarlslund / hashmuncher
  Grab NetNTLMv2 hashes using ETW with administrative rights on Windows 8.1 / Windows Server 2016 and later
  ☆91Updated 2 years ago
• zeronetworks / ldapfw
  Protect your Domain Controllers by auditing and restricting LDAP requests
  ☆157Updated this week
• 0xe7 / WonkaVision
  ☆83Updated 2 years ago
• nasbench / Misc-Research
  A collection of tools, scripts and personal research
  ☆128Updated last month
• nettitude / MalSCCM
  ☆247Updated last year
• Semperis / GoldenGMSA
  GolenGMSA tool for working with GMSA passwords
  ☆150Updated last year
• cbecks2 / edr-artifacts
  This repository is meant to catalog network and host artifacts associated with various EDR products "shell" and response functionalities.
  ☆79Updated 9 months ago
• zblurx / acltoolkit
  ACL abuse swiss-knife
  ☆123Updated 2 years ago
• AssuranceMaladieSec / AD-description-password-finder
  Retrieve AD accounts description and search for password in it
  ☆83Updated 2 years ago
• synacktiv / ntdissector
  ☆141Updated 9 months ago
• LuemmelSec / Custom-BloodHound-Queries
  ☆178Updated 6 months ago
• improsec / BackupOperatorToolkit
  The BackupOperatorToolkit contains different techniques allowing you to escalate from Backup Operator to Domain Admin
  ☆177Updated 2 years ago
• wietze / Invoke-ArgFuscator
  Invoke-ArgFuscator is an open-source, cross-platform PowerShell module that helps generate obfuscated command-lines for common system-nat…
  ☆172Updated last month
• joeavanzato / RetrievIR
  PowerShell script designed to help Incident Responders collect forensic evidence from local and remote Windows devices.
  ☆102Updated 9 months ago
• HernanRodriguez1 / MimikatzFUD
  ☆99Updated 3 years ago
• roobixx / EventLogForRedTeams
  Simple PoC from Malicious Payload Injection from Windows Event Log Entry
  ☆27Updated 2 years ago
• h4wkst3r / ADOKit
  Azure DevOps Services Attack Toolkit
  ☆141Updated 2 months ago
• HuskyHacks / SharpTokenFinder
  C# implementation of TokenFinder. Steal M365 access tokens from Office Desktop apps
  ☆139Updated 10 months ago
• daem0nc0re / Abusing_Weak_ACL_on_Certificate_Templates
  Investigation about ACL abusing for Active Directory Certificate Services (AD CS)
  ☆122Updated 3 years ago
• TheresAFewConors / MSSprinkler
  MSSprinkler is a password spraying utility for organizations to test their Microsoft Online accounts from an external perspective. It emp…
  ☆75Updated 3 months ago
• coffeegist / bofhound
  Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel
  ☆229Updated 2 weeks ago
• csandker / Azure-AccessPermissions
  ☆108Updated 2 years ago
• trustedsec / DitExplorer
  Tool for viewing NTDS.dit
  ☆167Updated 2 months ago
• Malcrove / SeamlessPass
  A tool leveraging Kerberos tickets to get Microsoft 365 access tokens using Seamless SSO
  ☆173Updated 9 months ago