Alternatives and similar repositories for WSuspicious

Users that are interested in WSuspicious are comparing it to the libraries listed below

• S3cur3Th1sSh1t / Invoke-SharpLoader
  ☆364Updated 4 years ago
• GoSecure / pywsus
  Standalone implementation of a part of the WSUS spec. Built for offensive security purposes.
  ☆329Updated 3 years ago
• NetSPI / ESC
  Evil SQL Client (ESC) is an interactive .NET SQL console client with enhanced SQL Server discovery, access, and data exfiltration feature…
  ☆299Updated 2 years ago
• xforcered / InvisibilityCloak
  Proof-of-concept obfuscation toolkit for C# post-exploitation tools
  ☆432Updated 3 years ago
• ZeroDayLab / PowerSploit
  PowerSploit - A PowerShell Post-Exploitation Framework
  ☆237Updated 3 years ago
• tothi / rbcd-attack
  Kerberos Resource-Based Constrained Delegation Attack from Outside using Impacket
  ☆583Updated 3 months ago
• N7WEra / SharpAllTheThings
  The idea is to collect all the C# projects that are Sharp{Word} that can be used in Cobalt Strike as execute assembly command.
  ☆482Updated 3 years ago
• outflanknl / Spray-AD
  A Cobalt Strike tool to audit Active Directory user accounts for weak, well known or easy guessable passwords.
  ☆443Updated 3 years ago
• FuzzySecurity / StandIn
  StandIn is a small .NET35/45 AD post-exploitation toolkit
  ☆822Updated 2 years ago
• padovah4ck / PSByPassCLM
  Bypass for PowerShell Constrained Language Mode
  ☆403Updated 3 years ago
• mdsecactivebreach / Farmer
  ☆405Updated 4 years ago
• 0xthirteen / SharpMove
  .NET Project for performing Authenticated Remote Execution
  ☆406Updated 2 years ago
• RedSiege / EDD
  Enumerate Domain Data
  ☆335Updated 2 years ago
• S3cur3Th1sSh1t / SharpImpersonation
  A User Impersonation tool - via Token or Shellcode injection
  ☆419Updated 3 years ago
• NotMedic / NetNTLMtoSilverTicket
  SpoolSample -> Responder w/NetNTLM Downgrade -> NetNTLMv1 -> NTLM -> Kerberos Silver Ticket
  ☆906Updated 4 years ago
• juliourena / SharpNoPSExec
  Get file less command execution for lateral movement.
  ☆630Updated 3 years ago
• BC-SECURITY / Invoke-ZeroLogon
  Invoke-ZeroLogon allows attackers to impersonate any computer, including the domain controller itself, and execute remote procedure calls…
  ☆218Updated 5 years ago
• mgeeky / Stracciatella
  OpSec-safe Powershell runspace from within C# (aka SharpPick) with AMSI, Constrained Language Mode and Script Block Logging disabled at s…
  ☆537Updated 3 years ago
• CCob / lsarelayx
  NTLM relaying for Windows made easy
  ☆578Updated 2 years ago
• nyxgeek / ntlmscan
  scan for NTLM directories
  ☆375Updated 3 months ago
• ly4k / Pachine
  Python implementation for CVE-2021-42278 (Active Directory Privilege Escalation)
  ☆277Updated 3 years ago
• mandiant / ADFSDump
  ☆368Updated 2 years ago
• rasta-mouse / AmsiScanBufferBypass
  Bypass AMSI by patching AmsiScanBuffer
  ☆277Updated 4 years ago
• 0xthirteen / MoveKit
  Cobalt Strike kit for Lateral Movement
  ☆677Updated 5 years ago
• skelsec / kerberoast
  Kerberoast attack -pure python-
  ☆436Updated 2 years ago
• Flangvik / BetterSafetyKatz
  Fork of SafetyKatz that dynamically fetches the latest pre-compiled release of Mimikatz directly from gentilkiwi GitHub repo, runtime pat…
  ☆877Updated 4 years ago
• boh / RedCsharp
  Collection of C# projects. Useful for pentesting and redteaming.
  ☆319Updated 2 years ago
• tomcarver16 / ADSearch
  A tool to help query AD via the LDAP protocol
  ☆595Updated last year
• mandiant / ADFSpoof
  ☆407Updated 6 months ago
• optiv / Talon
  A password guessing tool that targets the Kerberos and LDAP services within the Windows Active Directory environment.
  ☆447Updated 2 years ago