Alternatives and similar repositories for CVE-2023-38146

Users that are interested in CVE-2023-38146 are comparing it to the libraries listed below

• JPG0mez / ADCSync
  Use ESC1 to perform a makeshift DCSync and dump hashes
  ☆209Updated last year
• chebuya / Havoc-C2-SSRF-poc
  CVE-2024-41570: Havoc C2 0.7 Teamserver SSRF exploit
  ☆74Updated last year
• wh0amitz / SharpRODC
  To audit the security of read-only domain controllers
  ☆117Updated last year
• TunnelGRE / Percino
  Evasive Golang Loader
  ☆136Updated last year
• LuemmelSec / ntlmrelayx.py_to_exe
  ☆92Updated 2 years ago
• rasta-mouse / SCMUACBypass
  ☆100Updated 2 years ago
• testanull / MS-SharePoint-July-Patch-RCE-PoC
  ☆156Updated last year
• RedTeamPentesting / adauth
  Active Directory Authentication Library
  ☆79Updated 2 weeks ago
• Offensive-Panda / LsassReflectDumping
  This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…
  ☆207Updated last year
• mertdas / SharpLateral
  Lateral Movement
  ☆124Updated last year
• Aur3ns / LsassStealer
  Morpheus is an lsass stealer that extracts lsass.exe in RAM and exfiltrates it via forged and crypted NTP packets. For authorized testin…
  ☆116Updated 4 months ago
• synacktiv / OUned
  The OUned project automating Active Directory Organizational Units ACL exploitation through gPLink poisoning
  ☆147Updated this week
• Diverto / IPPrintC2
  PoC for using MS Windows printers for persistence / command and control via Internet Printing
  ☆148Updated last year
• rweijnen / createdump
  Leverage WindowsApp createdump tool to obtain an lsass dump
  ☆149Updated last year
• horizon3ai / backup_dc_registry
  A simple POC that abuses Backup Operator privileges to remote dump SAM, SYSTEM, and SECURITY
  ☆86Updated 3 years ago
• bruno-1337 / SeDebugPrivilege-Exploit
  Simple C++ PoC of SeDebugPrivilege Privesc
  ☆26Updated last year
• casp3r0x0 / LoaderGate
  a C# implementation for a shellcode loader that capable to bypass Cortex XDR and Sophos EDR.
  ☆89Updated 5 months ago
• MzHmO / TGSThief
  My implementation of the GIUDA project in C++
  ☆187Updated 2 years ago
• decoder-it / ADCSCoercePotato
  ☆231Updated last year
• Flangvik / ObfuscatedSharpCollection
  Attempt at Obfuscated version of SharpCollection
  ☆222Updated this week
• watchtowrlabs / Citrix-Virtual-Apps-XEN-Exploit
  Citrix Virtual Apps and Desktops (XEN) Unauthenticated RCE
  ☆196Updated 11 months ago
• MinoTauro2020 / RedTeam-CRTL-Certification
  ☆18Updated 10 months ago
• improsec / BackupOperatorToolkit
  The BackupOperatorToolkit contains different techniques allowing you to escalate from Backup Operator to Domain Admin
  ☆175Updated 2 years ago
• Chocapikk / CVE-2023-29357
  Microsoft SharePoint Server Elevation of Privilege Vulnerability
  ☆234Updated 2 years ago
• Sq00ky / RunAsPasswd
  A RunAs clone with the ability to specify the password as an argument.
  ☆111Updated 2 years ago
• smokeme / airstrike
  ☆170Updated last year
• CICADA8-Research / LogHunter
  Opsec tool for finding user sessions by analyzing event log files through RPC (MS-EVEN)
  ☆75Updated last year
• Wh04m1001 / CVE-2024-20656
  ☆137Updated last year
• passtheticket / CVE-2024-38200
  CVE-2024-38200 & CVE-2024-43609 - Microsoft Office NTLMv2 Disclosure Vulnerability
  ☆144Updated 9 months ago
• sqrtZeroKnowledge / CVE-2023-23397_EXPLOIT_0DAY
  Exploit for the CVE-2023-23397
  ☆160Updated 2 years ago