Alternatives and similar repositories for SystemNightmare:

Users that are interested in SystemNightmare are comparing it to the libraries listed below

• byt3bl33d3r / ItWasAllADream
  A PrintNightmare (CVE-2021-34527) Python Scanner. Scan entire subnets for hosts vulnerable to the PrintNightmare RCE
  ☆789Updated 8 months ago
• cfalta / MicrosoftWontFixList
  A list of vulnerabilities or design flaws that Microsoft does not intend to fix. Since the number is growing, I decided to make a list. T…
  ☆942Updated 3 years ago
• bats3c / ADCSPwn
  A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certifica…
  ☆822Updated last year
• CCob / lsarelayx
  NTLM relaying for Windows made easy
  ☆553Updated last year
• antonioCoco / RemotePotato0
  Windows Privilege Escalation from User to Domain Admin.
  ☆1,355Updated 2 years ago
• GossiTheDog / HiveNightmare
  Exploit allowing you to read registry hives as non-admin on Windows 10 and 11
  ☆731Updated 3 years ago
• Dec0ne / KrbRelayUp
  KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default…
  ☆1,554Updated 2 years ago
• cube0x0 / KrbRelay
  Framework for Kerberos relaying
  ☆889Updated 2 years ago
• topotam / PetitPotam
  PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.
  ☆1,889Updated 5 months ago
• GhostPack / ForgeCert
  "Golden" certificates
  ☆650Updated 5 months ago
• GoSecure / pywsus
  Standalone implementation of a part of the WSUS spec. Built for offensive security purposes.
  ☆300Updated 2 years ago
• mubix / solarflare
  SolarWinds Orion Account Audit / Password Dumping Utility
  ☆351Updated last year
• jfmaes / LazySign
  Create fake certs for binaries using windows binaries and the power of bat files
  ☆551Updated 10 months ago
• optiv / Go365
  An Office365 User Attack Tool
  ☆630Updated 10 months ago
• GoSecure / WSuspicious
  WSuspicious - A tool to abuse insecure WSUS connections for privilege escalations
  ☆353Updated 4 years ago
• juliourena / SharpNoPSExec
  Get file less command execution for lateral movement.
  ☆608Updated 2 years ago
• knavesec / Max
  Maximizing BloodHound. Max is a good boy.
  ☆503Updated last week
• cfalta / adsec
  An introduction to Active Directory security
  ☆639Updated 2 years ago
• nccgroup / nccfsas
  Information released publicly by NCC Group's Full Spectrum Attack Simulation (FSAS) team.
  ☆608Updated 2 years ago
• itm4n / Perfusion
  Exploit for the RpcEptMapper registry key permissions vulnerability (Windows 7 / 2088R2 / 8 / 2012)
  ☆412Updated 3 years ago
• outflanknl / PrintNightmare
  ☆332Updated 3 years ago
• eladshamir / Whisker
  Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, …
  ☆840Updated 2 months ago
• smokeme / payloadGenerator
  Generate obfuscated meterpreter shells
  ☆228Updated 3 years ago
• mamun-sec / dfirt
  Collect information of Windows PC when doing incident response
  ☆243Updated last year
• cfalta / PowerShellArmoury
  A PowerShell armoury for security guys and girls
  ☆465Updated last year
• calebstewart / CVE-2021-1675
  Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)
  ☆1,030Updated 3 years ago
• LaresLLC / CVE-2021-1675
  CVE-2021-1675 Detection Info
  ☆215Updated last year
• tothi / rbcd-attack
  Kerberos Resource-Based Constrained Delegation Attack from Outside using Impacket
  ☆517Updated 2 years ago
• zeronetworks / BloodHound-Tools
  Collection of tools that reflect the network dimension into Bloodhound's data
  ☆443Updated 2 years ago
• optiv / Ivy
  Ivy is a payload creation framework for the execution of arbitrary VBA (macro) source code directly in memory. Ivy’s loader does this by …
  ☆744Updated last year