Alternatives and similar repositories for ad-ldap-enum

Users that are interested in ad-ldap-enum are comparing it to the libraries listed below

• sensepost / UserEnum
  Domain user enumeration tool
  ☆215Updated last year
• ImpostorKeanu / eavesarp
  Analyze ARP requests to identify intercommunicating hosts and stale network address configurations (SNACs)
  ☆67Updated 3 years ago
• csababarta / ntdsxtract
  Active Directory forensic framework
  ☆326Updated 3 years ago
• mdsecresearch / LyncSniper
  LyncSniper: A tool for penetration testing Skype for Business and Lync deployments
  ☆306Updated 5 years ago
• HarmJ0y / PowerUp
  This version of PowerUp is now unsupported. See https://github.com/Veil-Framework/PowerTools/tree/master/PowerUp for the most current ver…
  ☆245Updated 8 years ago
• TBGSecurity / splunk_shells
  Weaponizing Splunk with reverse and bind shells.
  ☆183Updated 8 years ago
• trustedsec / ridenum
  Rid_enum is a null session RID cycle attack for brute forcing domain controllers.
  ☆286Updated 11 months ago
• clr2of8 / GatherContacts
  A Burp Suite Extension to pull Employee Names from Google and Bing LinkedIn Search Results
  ☆194Updated last year
• vletoux / MakeMeEnterpriseAdmin
  ☆257Updated 2 years ago
• HarmJ0y / DAMP
  The Discretionary ACL Modification Project: Persistence Through Host-based Security Descriptor Modification
  ☆380Updated 5 years ago
• Sw4mpf0x / PowerLurk
  Malicious WMI Events using PowerShell
  ☆387Updated 8 years ago
• cyberark / RiskySPN
  Detect and abuse risky SPNs
  ☆262Updated 8 years ago
• dafthack / HostRecon
  This function runs a number of checks on a system to help provide situational awareness to a penetration tester during the reconnaissance…
  ☆451Updated 7 years ago
• fox-it / Invoke-ACLPwn
  ☆523Updated 2 years ago
• porterhau5 / BloodHound-Owned
  A collection of files for adding and leveraging custom properties in BloodHound.
  ☆186Updated 5 years ago
• SadProcessor / Cheats
  Various Cheat Sheets
  ☆181Updated 4 years ago
• skorov / ridrelay
  Enumerate usernames on a domain where you have no creds by using SMB Relay with low priv.
  ☆395Updated 5 years ago
• trustedsec / egressbuster
  Egressbuster is a method to check egress filtering and identify if ports are allowed. If they are, you can automatically spawn a shell.
  ☆367Updated 11 months ago
• nyxgeek / lyncsmash
  locate and attack Lync/Skype for Business
  ☆339Updated 9 months ago
• threatexpress / tinyshell
  ☆169Updated 7 years ago
• absolomb / WindowsEnum
  A Powershell Privilege Escalation Enumeration Script.
  ☆312Updated 7 years ago
• Mr-Un1k0d3r / CatMyPhish
  Search for categorized domain
  ☆445Updated 6 years ago
• HarmJ0y / ASREPRoast
  Project that retrieves crackable hashes from KRB5 AS-REP responses for users without kerberoast preauthentication enabled.
  ☆205Updated 6 years ago
• vysecurity / ps1-toolkit
  Obfuscated Penetration Testing PowerShell scripts
  ☆147Updated 8 months ago
• JavelinNetworks / HoneypotBuster
  ☆283Updated 7 years ago
• fullmetalcache / PowerLine
  ☆307Updated 6 years ago
• lorentzenman / youzer
  Fake User Generator for Active Directory Environments
  ☆158Updated 6 years ago
• vysecurity / ANGRYPUPPY
  Bloodhound Attack Path Automation in CobaltStrike
  ☆318Updated 5 years ago
• obscuritylabs / RAI
  Rapid Attack Infrastructure (RAI)
  ☆306Updated 7 months ago
• cobbr / ObfuscatedEmpire
  ObfuscatedEmpire is a fork of Empire with Invoke-Obfuscation integrated directly into it's functionality.
  ☆229Updated 7 years ago