Alternatives and similar repositories for NO445-lateral-movement

Users that are interested in NO445-lateral-movement are comparing it to the libraries listed below

• AgeloVito / self_delete_bof
  BOF implementation of delete self poc that delete a locked executable or a currently running file from disk by its pid, path, or the curr…
  ☆75Updated last year
• XiaoliChan / CrackMapExec-Extension
  CrackMapExec extension module/protocol support
  ☆42Updated last year
• FeigongSec / NTLMINFO
  ☆46Updated 4 years ago
• timwhitez / Doge-DumpMem
  dump lsass
  ☆37Updated 3 years ago
• mabangde / NTDSDumpEx
  ☆34Updated 3 months ago
• Jumbo-WJB / SharpAllowedToAct-Modify
  resource-based constrained delegation RBCD
  ☆45Updated 3 years ago
• kyxiaxiang / CrackSleeve4.9
  ☆40Updated last year
• StarfireLab / BrowserPivot
  ☆31Updated last year
• dust-life / Free445-BOF
  ☆24Updated last month
• aleenzz / SCExec
  ☆30Updated 2 years ago
• Ridter / MSSQL_CLR
  MSSQL CLR for pentest.
  ☆54Updated last year
• m1ddl3w4r3 / ExecRemoteNET
  Execute Remote Assembly with args passing and with AMSI and ETW patching .
  ☆34Updated 2 years ago
• scareing / cmd2shellcode
  cmd2shellcode
  ☆79Updated 4 years ago
• Haunted-Banshee / Shellcode-Hastur
  Shellcode Reductio Entropy Tools
  ☆69Updated last year
• jiushill / wmi-hack-py
  ☆49Updated 2 years ago
• AgeloVito / adduserbysamr-bof
  Cobalt Strike BOF that Add a user to localgroup by samr
  ☆130Updated 2 years ago
• woaiqiukui / sam-the-admin-maq
  Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user; Adding the sam_the_admin_maq when MachineAccoun…
  ☆22Updated last year
• Rvn0xsy / ZeroLogon
  CVE-2020-1472 C++
  ☆83Updated 2 years ago
• xunyang1 / ssp_dump_lsass
  RPC 调用添加ssp扩展dump lsass
  ☆19Updated 2 years ago
• Jumbo-WJB / PTH_Exchange
  If you only have hash, you can still operate exchange
  ☆75Updated 3 years ago
• M0nster3 / ITaskServers
  Bypass EDR Create TaskServers
  ☆37Updated 2 years ago
• seventeenman / SelfDel-BOF
  Delete file regardless of whether the handle is used via SetFileInformationByHandle
  ☆44Updated last year
• Octoberfest7 / KillDefender_BOF
  Beacon Object File implementation of pwn1sher's KillDefender
  ☆66Updated 2 years ago
• StarfireLab / EFSRPCrpc
  利用EFSRPC协议批量探测出网
  ☆66Updated last year
• XiaoliChan / LDAPShell
  A wrapper of ldap_shell.py module which in ntlmrelayx
  ☆62Updated 2 years ago
• howmp / iisproxy
  通过websocket在IIS8(Windows Server 2012)以上实现socks5代理
  ☆89Updated last year
• INotGreen / Invoke-SharpOffensive
  ☆15Updated last year
• yanghaoi / LaunchSystemCmd
  在权限足够的情况下弹出system权限的cmd命令行，包含exe和dll两种文件类型，可用于一些可能存在本地提权漏洞的测试。
  ☆33Updated 3 years ago
• 0x3rhy / AddUser-Bof
  Cobalt Strike BOF that Add an admin user
  ☆77Updated 2 years ago
• LostZX / vcenter_tool
  ☆26Updated 2 years ago