Alternatives and similar repositories for ShadowHound:

Users that are interested in ShadowHound are comparing it to the libraries listed below

• CrowdStrike / sccmhound
  A BloodHound collector for Microsoft Configuration Manager
  ☆308Updated 2 months ago
• MzHmO / PowershellKerberos
  Some scripts to abuse kerberos using Powershell
  ☆328Updated last year
• Leo4j / Invoke-ADEnum
  Automated Active Directory Enumeration
  ☆435Updated this week
• Mayyhem / Maestro
  Abusing Intune for Lateral Movement over C2
  ☆327Updated last month
• synacktiv / GPOddity
  The GPOddity project, aiming at automating GPO attack vectors through NTLM relaying (and more).
  ☆287Updated 4 months ago
• LuemmelSec / Client-Checker
  ☆174Updated 3 months ago
• PShlyundin / GPOHunter
  A security assessment tool for analyzing Active Directory Group Policy Objects (GPOs) to identify misconfigurations and vulnerabilities
  ☆207Updated 2 months ago
• CobblePot59 / ADcheck
  Assess the security of your Active Directory with few or all privileges.
  ☆301Updated last week
• helviojunior / knowsmore
  KnowsMore is a swiss army knife tool for pentesting Microsoft Active Directory (NTLM Hashes, BloodHound, NTDS and DCSync).
  ☆220Updated 7 months ago
• Leo4j / Amnesiac
  Amnesiac is a post-exploitation framework entirely written in PowerShell and designed to assist with lateral movement within Active Direc…
  ☆405Updated this week
• garrettfoster13 / pre2k
  ☆312Updated 2 weeks ago
• WaterExecution / vulnerable-AD-plus
  Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab
  ☆148Updated 2 years ago
• Malcrove / SeamlessPass
  A tool leveraging Kerberos tickets to get Microsoft 365 access tokens using Seamless SSO
  ☆168Updated 6 months ago
• CICADA8-Research / RemoteKrbRelay
  Remote Kerberos Relay made easy! Advanced Kerberos Relay Framework
  ☆566Updated 8 months ago
• dievus / msLDAPDump
  LDAP enumeration tool implemented in Python3
  ☆226Updated 5 months ago
• MWR-CyberSec / PXEThief
  PXEThief is a set of tooling that can extract passwords from the Operating System Deployment functionality in Microsoft Endpoint Configur…
  ☆355Updated 9 months ago
• garrettfoster13 / sccmhunter
  SCCMHunter is a post-ex tool built to streamline identifying, profiling, and attacking SCCM related assets in an Active Directory domain.…
  ☆730Updated 2 weeks ago
• ajm4n / DLLHound
  Find potential DLL Sideloads on your windows computer
  ☆176Updated 2 months ago
• logangoins / Cable
  .NET post-exploitation toolkit for Active Directory reconnaissance and exploitation
  ☆276Updated 4 months ago
• foxlox / GIUDA
  Ask a TGS on behalf of another user without password
  ☆467Updated 7 months ago
• CCob / DRSAT
  Disconnected RSAT - A method of running Group Policy Manager, Certificate Authority and Certificate Templates MMC snap-ins from non-domai…
  ☆228Updated 2 months ago
• Leo4j / Invoke-SessionHunter
  Retrieve and display information about active user sessions on remote computers. No admin privileges required.
  ☆180Updated 7 months ago
• MaLDAPtive / Invoke-Maldaptive
  MaLDAPtive is a framework for LDAP SearchFilter parsing, obfuscation, deobfuscation and detection.
  ☆269Updated 7 months ago
• LuemmelSec / PwnDoc-Vulns
  ☆141Updated 4 months ago
• SecuraBV / Timeroast
  Timeroasting scripts by Tom Tervoort
  ☆275Updated last year
• Pennyw0rth / NetExec-Lab
  Lab used for workshop and CTF
  ☆174Updated last month
• Yaxxine7 / ASRepCatcher
  Make everyone in your VLAN ASRep roastable
  ☆184Updated 3 weeks ago
• 0xthirteen / Carseat
  Python implementation of GhostPack's Seatbelt situational awareness tool
  ☆255Updated 4 months ago