Fast Windows post-exploitation wins after initial access.
☆29Jan 28, 2026Updated 9 months ago
Alternatives and similar repositories for AfterShell
Users that are interested in AfterShell are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Network scanning tool designed to detect and report changes in open ports and services over time☆13Oct 16, 2025Updated last year
- GitHub Workflows Insights☆47Jun 27, 2026Updated 4 months ago
- self-hosted Azure OSINT tool☆35Jun 24, 2025Updated last year
- Sniffs outbound traffic for suspicious, beacon-like callbacks, because if it keeps coming back on schedule, it's probably not breakfast.☆20Jan 22, 2026Updated 9 months ago
- SACL Scanner is a tool designed to scan and analyze SACLs.☆53Feb 13, 2025Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆28Mar 14, 2026Updated 7 months ago
- ☆30Jul 26, 2024Updated 2 years ago
- A lightweight UDP DNS forwarder that highlights potentially expired or unregistered domains by watching for unanswered lookups.☆13Nov 1, 2025Updated 11 months ago
- BOF and C++ implementation of the Windows Defender sandboxing technique described by Elastic Security Labs/Gabriel Landau.☆24Jul 5, 2023Updated 3 years ago
- Remap ntdll.dll using only NTAPI functions with a suspended process☆29Apr 13, 2025Updated last year
- Parser and reconciliation tooling for large Active Directory environments.☆34Feb 18, 2025Updated last year
- ☆16Jan 9, 2025Updated last year
- a small script to collect information from a management point☆37Jan 19, 2026Updated 9 months ago
- Click Once + App Domain☆69Feb 23, 2026Updated 8 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Automated Pass-the-Ticket (PtT) attack. Standalone alternative to Rubeus and Mimikatz for this attack. In C#, C++, Crystal, Python, Rust,…☆155Aug 31, 2026Updated last month
- A rust proof of concept to demonstrate registry overwriting via RegRestoreKey using the Offline Registry Library☆24Nov 13, 2025Updated 11 months ago
- Beacon Object File (BOF) for Using the BadSuccessor Technique for Account Takeover☆91Oct 20, 2025Updated last year
- Demo code JavaScript POC that tricks user into sending Windows hash to responder☆37Dec 12, 2025Updated 10 months ago
- An alternative to the builtin clipboard feature in Cobalt Strike that adds the capability to enable/disable and dump the clipboard histor…☆117Apr 16, 2026Updated 6 months ago
- adws enumeration bof☆176Sep 1, 2026Updated last month
- Automatically deploying Mythic C2 in Azure using Terraform☆25Jul 3, 2026Updated 3 months ago
- A C and Go /proc/pid/maps cloak of invisibilty for shared object files☆23Nov 19, 2025Updated 11 months ago
- Cobalt Strike UDC2 implementation that provides an Slack C2 channel☆70Jan 5, 2026Updated 9 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Nemesis agent for Mythic☆29Dec 11, 2025Updated 10 months ago
- ☆57Jun 28, 2025Updated last year
- A TUI for Active Directory collection.☆178Mar 17, 2026Updated 7 months ago
- One WSL BOF to rule them all☆190Jan 14, 2026Updated 9 months ago
- A PowerShell script designed to detect misconfigured Azure Storage Accounts that could potentially be exploited for privilege escalation …☆13Apr 25, 2024Updated 2 years ago
- Python script to leverage MSFT_MTProcess WMI class☆43Sep 17, 2025Updated last year
- ☆24Feb 1, 2025Updated last year
- An HTA Application which builds Azure (Entra) Scenarios for Red Team Simulations☆63Aug 18, 2025Updated last year
- ☆15Oct 29, 2024Updated 2 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- A Crystal Palace shared library to resolve & perform syscalls☆67Oct 29, 2025Updated last year
- ☆99Sep 1, 2024Updated 2 years ago
- Beacon Object File (BOF) port of DumpGuard for extracting NTLMv1 hashes from sessions on modern Windows systems.☆221Jan 6, 2026Updated 9 months ago
- Create Entra Global Admin accounts from On-Prem☆25Jul 28, 2025Updated last year
- OpenHashAPI provides a secure method of communicating hashes and enables lightweight workflows for security practitioners and enthusiasts…☆13Oct 27, 2024Updated 2 years ago
- Stealthy In-Memory Local Password Harvester (SILPH) tool: dump LSA, SAM and DCC2 with indirect syscall☆168Dec 17, 2025Updated 10 months ago
- A tool that allows you to extract a client-specific wordlist from the LDAP of an Active Directory.☆61Oct 9, 2026Updated 2 weeks ago