Alternatives and similar repositories for KerberOPSEC:

Users that are interested in KerberOPSEC are comparing it to the libraries listed below

• garrettfoster13 / aced
  ☆159Updated 6 months ago
• nettitude / ETWHash
  C# POC to extract NetNTLMv1/v2 hashes from ETW provider
  ☆256Updated last year
• xpn / sccmwtf
  ☆151Updated 2 months ago
• improsec / BackupOperatorToolkit
  The BackupOperatorToolkit contains different techniques allowing you to escalate from Backup Operator to Domain Admin
  ☆174Updated 2 years ago
• slemire / WSPCoerce
  PoC to coerce authentication from Windows hosts using MS-WSP
  ☆236Updated last year
• G0ldenGunSec / GetWebDAVStatus
  Determine if the WebClient Service (WebDAV) is running on a remote system
  ☆137Updated last year
• cube0x0 / LdapSignCheck
  Beacon Object File & C# project to check LDAP signing
  ☆189Updated 9 months ago
• rasta-mouse / CsWhispers
  Source generator to add D/Invoke and indirect syscall methods to a C# project.
  ☆177Updated last year
• fortalice / modifyCertTemplate
  ADCS cert template modification and ACL enumeration
  ☆136Updated last year
• daem0nc0re / Abusing_Weak_ACL_on_Certificate_Templates
  Investigation about ACL abusing for Active Directory Certificate Services (AD CS)
  ☆122Updated 3 years ago
• winsecurity / Offensive-C-Sharp
  ☆165Updated 2 years ago
• powerseb / PowerExtract
  ☆117Updated last month
• mandiant / ccmpwn
  ☆202Updated last year
• mdsecactivebreach / DragonCastle
  A PoC that combines AutodialDLL lateral movement technique and SSP to scrape NTLM hashes from LSASS process.
  ☆298Updated 2 years ago
• fortalice / bofhound
  Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel
  ☆329Updated last year
• mlcsec / SharpSQL
  Simple C# implementation of PowerUpSQL
  ☆95Updated 9 months ago
• RedSiege / PersistAssist
  Fully modular persistence framework
  ☆255Updated 2 years ago
• Flangvik / ObfuscatedSharpCollection
  Attempt at Obfuscated version of SharpCollection
  ☆206Updated 2 weeks ago
• Flangvik / CobaltBus
  Cobalt Strike External C2 Integration With Azure Servicebus, C2 traffic via Azure Servicebus
  ☆229Updated 3 years ago
• Offensive-Panda / LsassReflectDumping
  This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…
  ☆198Updated 6 months ago
• JPG0mez / ADCSync
  Use ESC1 to perform a makeshift DCSync and dump hashes
  ☆206Updated last year
• nettitude / MalSCCM
  ☆246Updated last year
• Hackndo / WebclientServiceScanner
  Python tool to Check running WebClient services on multiple targets based on @leechristensen
  ☆273Updated 3 years ago
• mlcsec / ASRenum-BOF
  Cobalt Strike BOF that identifies Attack Surface Reduction (ASR) rules, actions, and exclusion locations
  ☆154Updated last year
• ShutdownRepo / ShadowCoerce
  MS-FSRVP coercion abuse PoC
  ☆288Updated 3 years ago
• wavvs / nanorobeus
  COFF file (BOF) for managing Kerberos tickets.
  ☆295Updated last year
• p0dalirius / MSSQL-Analysis-Coerce
  A technique to coerce a Windows SQL Server to authenticate on an arbitrary machine.
  ☆129Updated last year
• jfmaes / Invoke-DLLClone
  Koppeling x Metatwin x LazySign
  ☆210Updated 3 years ago
• connormcgarr / tgtdelegation
  tgtdelegation is a Beacon Object File (BOF) to obtain a usable TGT via the "TGT delegation trick"
  ☆173Updated 3 years ago
• VirtualAlllocEx / Payload-Download-Cradles
  This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR …
  ☆257Updated 2 years ago