Alternatives and similar repositories for CVE-2023-38146

Users that are interested in CVE-2023-38146 are comparing it to the libraries listed below

• chebuya / Havoc-C2-SSRF-poc
  CVE-2024-41570: Havoc C2 0.7 Teamserver SSRF exploit
  ☆74Updated last year
• passtheticket / CVE-2024-38200
  CVE-2024-38200 & CVE-2024-43609 - Microsoft Office NTLMv2 Disclosure Vulnerability
  ☆143Updated 8 months ago
• testanull / MS-SharePoint-July-Patch-RCE-PoC
  ☆157Updated last year
• sqrtZeroKnowledge / CVE-2023-23397_EXPLOIT_0DAY
  Exploit for the CVE-2023-23397
  ☆161Updated 2 years ago
• IncludeSecurity / c2-vulnerabilities
  PoCs of RCEs against open source C2 servers
  ☆87Updated last year
• bruno-1337 / SeDebugPrivilege-Exploit
  Simple C++ PoC of SeDebugPrivilege Privesc
  ☆25Updated last year
• JPG0mez / ADCSync
  Use ESC1 to perform a makeshift DCSync and dump hashes
  ☆211Updated last year
• RedTeamPentesting / adauth
  Active Directory Authentication Library
  ☆80Updated last month
• horizon3ai / backup_dc_registry
  A simple POC that abuses Backup Operator privileges to remote dump SAM, SYSTEM, and SECURITY
  ☆86Updated 3 years ago
• synacktiv / OUned
  The OUned project automating Active Directory Organizational Units ACL exploitation through gPLink poisoning
  ☆144Updated 6 months ago
• rweijnen / createdump
  Leverage WindowsApp createdump tool to obtain an lsass dump
  ☆149Updated last year
• wh0amitz / SharpRODC
  To audit the security of read-only domain controllers
  ☆118Updated last year
• xct / SeRestoreAbuse
  SeRestorePrivilege to SYSTEM
  ☆123Updated 3 years ago
• RayRRT / Active-Directory-Certificate-Services-abuse
  ☆52Updated 3 years ago
• TunnelGRE / Percino
  Evasive Golang Loader
  ☆135Updated last year
• LuemmelSec / ntlmrelayx.py_to_exe
  ☆92Updated 2 years ago
• watchtowrlabs / Citrix-Virtual-Apps-XEN-Exploit
  Citrix Virtual Apps and Desktops (XEN) Unauthenticated RCE
  ☆195Updated 10 months ago
• MzHmO / TGSThief
  My implementation of the GIUDA project in C++
  ☆186Updated 2 years ago
• mertdas / SharpLateral
  Lateral Movement
  ☆124Updated last year
• rasta-mouse / SCMUACBypass
  ☆100Updated 2 years ago
• adityatelange / evil-winrm-py
  Execute commands interactively on remote Windows machines using the WinRM protocol
  ☆238Updated 3 weeks ago
• Flangvik / ObfuscatedSharpCollection
  Attempt at Obfuscated version of SharpCollection
  ☆222Updated 3 weeks ago
• MzHmO / psexec_noinstall
  Repository contains psexec, which will help to exploit the forgotten pipe
  ☆171Updated 10 months ago
• Sq00ky / RunAsPasswd
  A RunAs clone with the ability to specify the password as an argument.
  ☆112Updated 2 years ago
• Aur3ns / LsassStealer
  Morpheus is an lsass stealer that extracts lsass.exe in RAM and exfiltrates it via forged and crypted NTP packets. For authorized testin…
  ☆110Updated 3 months ago
• OmriBaso / WTSImpersonator
  WTSImpersonator utilizes WTSQueryUserToken to steal user tokens by abusing the RPC Named Pipe "\\pipe\LSM_API_service"
  ☆119Updated last year
• d1rkmtrr / GithubC2
  Github as C2 Demonstration , free API = free C2 Infrastructure
  ☆141Updated 2 years ago
• powerseb / PowerExtract
  ☆119Updated 6 months ago
• Friends-Security / SharpExclusionFinder
  Tool designed to find folder exclusions using Windows Defender using command line utility MpCmdRun.exe as a low privileged user, without …
  ☆217Updated 11 months ago
• improsec / BackupOperatorToolkit
  The BackupOperatorToolkit contains different techniques allowing you to escalate from Backup Operator to Domain Admin
  ☆177Updated 2 years ago