A Bloodhound alternative. BloodBash will ingest the same files bloodhound does but no server is required to use this tool. It's great for quick AD enumeration.
☆175Updated this week
Alternatives and similar repositories for BloodBash
Users that are interested in BloodBash are comparing it to the libraries listed below
Sorting:
- PowerShell-based utility for mapping byte offsets to source code using hex and ASCII context for detection research and red team tooling.☆31Dec 31, 2025Updated 2 months ago
- modified mssqlclient from impacket to extract policies from the SCCM database☆44Updated this week
- An alternative to the builtin clipboard feature in Cobalt Strike that adds the capability to enable/disable and dump the clipboard histor…☆103Jan 9, 2026Updated last month
- ☆28Feb 11, 2026Updated 2 weeks ago
- wtftp.py is a tool to attack Microsoft Deployment Toolkit (MDT) and Windows Deployment Services (WDS).☆30Jan 22, 2026Updated last month
- Web File Manager☆11Aug 21, 2025Updated 6 months ago
- A portable C# utility for enumerating local and remote windows sessions☆56Jan 1, 2026Updated 2 months ago
- Wonka is a sweet Windows tool that extracts Kerberos tickets from the Local Security Authority (LSA) cache. Like finding a ticket, but fo…☆167Oct 21, 2025Updated 4 months ago
- Fast Windows post-exploitation wins after initial access.☆29Jan 28, 2026Updated last month
- SCEP request tool for AD CS and Intune☆73Oct 24, 2025Updated 4 months ago
- Exploit AD CS misconfiguration allowing privilege escalation and persistence from any child domain to full forest compromise☆129Dec 2, 2023Updated 2 years ago
- ProfileHound - BloodHound OpenGraph collector for user profiles stored on domain machines. Make informed decisions about looting secrets …☆154Jan 3, 2026Updated last month
- PowerShell Script to automatically abuse the BadSuccessor vulnerability (CVE-2025-53779)☆44Nov 19, 2025Updated 3 months ago
- A simple tool to identify WDS servers in Active Directory☆32Aug 25, 2025Updated 6 months ago
- adws enumeration bof☆167Feb 16, 2026Updated last week
- Windows Access token manipulation tool made in C#☆24Aug 24, 2025Updated 6 months ago
- SANS Workshop: Active Directory Privilege Escalation with Empire!☆36Nov 12, 2025Updated 3 months ago
- ☆75Jan 1, 2026Updated 2 months ago
- Automated Pass-the-Ticket (PtT) attack. Standalone alternative to Rubeus and Mimikatz for this attack. Implemented in C#, C++, Crystal, P…☆116Feb 17, 2026Updated last week
- Weaponize signed .NET ClickOnce applications for initial access by hijacking a dependency DLL via AppDomainManager injection and loading …☆124Feb 14, 2026Updated 2 weeks ago
- A small guide on Unknown/Orphaned SIDs and some PowerShell tools to help you get rid of them.☆20Mar 28, 2022Updated 3 years ago
- Creation of multiple Malware tools consisting of evasion, enumeration and exploitation☆92Updated this week
- Baseline a Windows System against LOLBAS☆71Feb 2, 2026Updated 3 weeks ago
- The Azure Execution Tool☆133Feb 6, 2026Updated 3 weeks ago
- Impacket☆49Updated this week
- A list of all Active Directory machines from HackTheBox☆217Jan 25, 2026Updated last month
- Location of some Active Directory lab scripts I have created and find useful☆113Feb 2, 2026Updated 3 weeks ago
- Deserialization payload generator for a variety of .NET formatters☆178Dec 2, 2025Updated 2 months ago
- Serverless AITM Simulation Framework for Entra ID and M365☆213Dec 29, 2025Updated 2 months ago
- This repository contains scripts about ACL abuse and any other active directory attacking methods.☆36Aug 20, 2023Updated 2 years ago
- Fun GUI for Group3rs output log☆37Aug 14, 2023Updated 2 years ago
- PoC to coerce authentication from Windows hosts using MS-WSP☆302Sep 7, 2023Updated 2 years ago
- C++ tool and library for converting .bin files to shellcode in multiple output formats.☆33Aug 18, 2025Updated 6 months ago
- A BloodHound collector for Microsoft Configuration Manager☆391Jul 7, 2025Updated 7 months ago
- Offensive GPO dumping and analysis tool that leverages and enriches BloodHound data☆358Jan 8, 2026Updated last month
- A Azure Exploitation Toolkit for Red Team & Pentesters☆165May 6, 2023Updated 2 years ago
- Python implementation of GhostPack's Seatbelt situational awareness tool☆271Nov 12, 2024Updated last year
- BOF template with boflink and mutator kit support☆49Jan 8, 2026Updated last month
- ☆137Feb 11, 2025Updated last year