Alternatives and similar repositories for ShadowHound:

Users that are interested in ShadowHound are comparing it to the libraries listed below

• CrowdStrike / sccmhound
  A BloodHound collector for Microsoft Configuration Manager
  ☆317Updated 4 months ago
• MzHmO / PowershellKerberos
  Some scripts to abuse kerberos using Powershell
  ☆328Updated last year
• Leo4j / Invoke-ADEnum
  Active Directory Auditing and Enumeration
  ☆450Updated last week
• logangoins / Cable
  .NET post-exploitation toolkit for Active Directory reconnaissance and exploitation
  ☆366Updated 3 weeks ago
• PShlyundin / GPOHunter
  A security assessment tool for analyzing Active Directory Group Policy Objects (GPOs) to identify misconfigurations and vulnerabilities
  ☆222Updated last month
• synacktiv / GPOddity
  The GPOddity project, aiming at automating GPO attack vectors through NTLM relaying (and more).
  ☆300Updated 5 months ago
• g0h4n / RustHound-CE
  Active Directory data ingestor for BloodHound Community Edition written in Rust. 🦀
  ☆187Updated 2 months ago
• garrettfoster13 / pre2k
  A tool to query for the existence of pre-windows 2000 computer objects.
  ☆329Updated 2 weeks ago
• TheManticoreProject / FindGPPPasswords
  A cross-platform tool to find and decrypt Group Policy Preferences passwords from the SYSVOL share using low-privileged domain accounts
  ☆146Updated 3 weeks ago
• arth0sz / Practice-AD-CS-Domain-Escalation
  Introductory guide on the configuration and subsequent exploitation of Active Directory Certificate Services with Certipy. Based on the w…
  ☆128Updated last year
• CobblePot59 / ADcheck
  Assess the security of your Active Directory with few or all privileges.
  ☆315Updated 2 weeks ago
• Mayyhem / Maestro
  Abusing Intune for Lateral Movement over C2
  ☆334Updated 2 months ago
• LuemmelSec / Client-Checker
  ☆174Updated 5 months ago
• xforcered / SoaPy
  SoaPy is a Proof of Concept (PoC) tool for conducting offensive interaction with Active Directory Web Services (ADWS) from Linux hosts.
  ☆217Updated 2 months ago
• decoder-it / KrbRelayEx
  ☆318Updated last month
• LuemmelSec / PwnDoc-Vulns
  ☆164Updated 3 weeks ago
• ajm4n / adPEAS
  winPEAS, but for Active Directory
  ☆150Updated last month
• Leo4j / Amnesiac
  Amnesiac is a post-exploitation framework entirely written in PowerShell and designed to assist with lateral movement within Active Direc…
  ☆416Updated last month
• secureworks / pytune
  ☆213Updated last month
• srlabs / Certiception
  An ADCS honeypot to catch attackers in your internal network.
  ☆287Updated 10 months ago
• synacktiv / SCCMSecrets
  SCCMSecrets.py aims at exploiting SCCM policies distribution for credentials harvesting, initial access and lateral movement.
  ☆210Updated 4 months ago
• CCob / DRSAT
  Disconnected RSAT - A method of running Group Policy Manager, Certificate Authority and Certificate Templates MMC snap-ins from non-domai…
  ☆235Updated 4 months ago
• 0xthirteen / Carseat
  Python implementation of GhostPack's Seatbelt situational awareness tool
  ☆257Updated 5 months ago
• Leo4j / Invoke-SessionHunter
  Retrieve and display information about active user sessions on remote computers. No admin privileges required.
  ☆183Updated 8 months ago
• dievus / msLDAPDump
  LDAP enumeration tool implemented in Python3
  ☆226Updated 7 months ago
• MaLDAPtive / Invoke-Maldaptive
  MaLDAPtive is a framework for LDAP SearchFilter parsing, obfuscation, deobfuscation and detection.
  ☆278Updated 9 months ago
• cogiceo / GPOHound
  Offensive GPO dumping and analysis tool that leverages and enriches BloodHound data
  ☆182Updated this week
• ajm4n / DLLHound
  Find potential DLL Sideloads on your windows computer
  ☆204Updated 3 months ago
• JumpsecLabs / TokenSmith
  TokenSmith generates Entra ID access & refresh tokens on offensive engagements. It is suitable for both covert adversary simulations and …
  ☆269Updated 3 months ago
• trustedsec / specula
  ☆191Updated 7 months ago