☆98May 26, 2023Updated 3 years ago
Alternatives and similar repositories for ntlmrelayx.py_to_exe
Users that are interested in ntlmrelayx.py_to_exe are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- From an account member of the group Backup Operators to Domain Admin without RDP or WinRM on the Domain Controller☆448Jan 4, 2025Updated last year
- DavRelayUp - a universal no-fix local privilege escalation in domain-joined windows workstations where LDAP signing is not enforced (the …☆580Jun 5, 2023Updated 3 years ago
- A C# tool to output crackable DPAPI hashes from user MasterKeys☆145Jun 12, 2026Updated 4 months ago
- BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions☆362Nov 19, 2024Updated last year
- An executable that simplifies adding the msds-AllowedToActOnBehalfOfOtherIdentity attribute for RBCD☆50Mar 10, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- C# version of NTLMRawUnHide☆72Oct 8, 2022Updated 4 years ago
- .NET Post-Exploitation Utility for Abusing Strong Explicit Certificate Mappings in ADCS☆160Feb 10, 2025Updated last year
- Proof-of-Concept tool to authenticate to an LDAP/S server with a certificate through Schannel☆788Aug 24, 2026Updated last month
- PoC to coerce authentication from Windows hosts using MS-WSP☆306Sep 7, 2023Updated 3 years ago
- ☆78Jun 17, 2025Updated last year
- An execute-assembly compatible tool for spraying local admin hashes on an Active Directory domain.☆18Apr 30, 2021Updated 5 years ago
- ADCS cert template modification and ACL enumeration☆144Jun 26, 2023Updated 3 years ago
- resource-based constrained delegation RBCD☆47Jan 15, 2022Updated 4 years ago
- A .NET implementation to dump SAM, SYSTEM, SECURITY registry hives from a remote host☆43Dec 8, 2023Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆17Oct 21, 2023Updated 2 years ago
- ☆15Aug 17, 2023Updated 3 years ago
- Tool to obtain hash using MS-SNTP for user accounts☆32Jan 22, 2025Updated last year
- Proof of Concept Utilities Developed to Research NTLM Relaying Attacks Targeting ADFS☆191Jun 22, 2022Updated 4 years ago
- ☆241Oct 8, 2024Updated 2 years ago
- Python script to leverage MSFT_MTProcess WMI class☆43Sep 17, 2025Updated last year
- A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other ob…☆497Oct 14, 2022Updated 4 years ago
- Repository contains psexec, which will help to exploit the forgotten pipe☆173Nov 5, 2024Updated last year
- ☆247May 5, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆347Jun 24, 2026Updated 3 months ago
- Escalate Service Account To LocalSystem via Kerberos☆403Sep 14, 2023Updated 3 years ago
- Library of BOFs to interact with SQL servers☆14Dec 6, 2024Updated last year
- Use the Netlogon Remote Protocol (MS-NRPC) to dump the target hash.☆62Feb 25, 2025Updated last year
- To audit the security of read-only domain controllers☆118Nov 27, 2023Updated 2 years ago
- Dump NTDS with golden certificates and UnPAC the hash☆649Mar 20, 2024Updated 2 years ago
- A wrapper of ldap_shell.py module which in ntlmrelayx☆62Sep 22, 2022Updated 4 years ago
- SCCMHunter is a post-ex tool built to streamline identifying, profiling, and attacking SCCM related assets in an Active Directory domain.…☆956Oct 3, 2026Updated 2 weeks ago
- GPOAnalyzer is a tool designed to assist in parsing domain Group Policy Object (GPO) files located in the SYSVOL directory.☆28Jun 14, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Execute unmanaged Windows executables in CobaltStrike Beacons☆723Mar 4, 2023Updated 3 years ago
- New generation of wmiexec.py☆1,302Aug 28, 2026Updated last month
- Combining KslDump and GhostKatz to dump LSASS using no-fix KslD.sys memory read to bypass PPL. Extracts MSV1_0 NT hashes and WDigest clea…☆78Mar 25, 2026Updated 6 months ago
- DCOM Lateral movement POC abusing the IMsiServer interface - uploads and executes a payload remotely☆397Dec 13, 2024Updated last year
- ☆505Nov 20, 2022Updated 3 years ago
- Detect whether a service is installed (blindly) and/or running (if exposing named pipes) on a remote machine without using local admin pr…☆239Sep 3, 2023Updated 3 years ago
- Simple BOF to read the protection level of a process☆123May 10, 2023Updated 3 years ago