Alternatives and similar repositories for AD-CS-Forest-Exploiter

Users that are interested in AD-CS-Forest-Exploiter are comparing it to the libraries listed below

• seriotonctf / AD-Tools
  List of some AD tools I frequently use
  ☆48Updated 3 months ago
• RedTeamPentesting / adauth
  Active Directory Authentication Library
  ☆80Updated 3 weeks ago
• hackerhouse-opensource / telnetclientpoc
  Microsoft Telnet Client MS-TNAP Server-Side Authentication Token Exploit
  ☆55Updated 4 months ago
• CultCornholio / RedTeamTP
  ☆79Updated 3 months ago
• p4p1 / havoc-bloodhound
  A GUI wrapper inside of Havoc to interact with bloodhound CE
  ☆72Updated last year
• Leo4j / PowerDACL
  A tool to abuse weak permissions of Active Directory Discretionary Access Control Lists (DACLs) and Access Control Entries (ACEs)
  ☆59Updated 2 months ago
• ASP4RUX / bypassEDR-AV
  ☆58Updated 10 months ago
• CICADA8-Research / LogHunter
  Opsec tool for finding user sessions by analyzing event log files through RPC (MS-EVEN)
  ☆72Updated last year
• Aur3ns / LsassStealer
  Morpheus is an lsass stealer that extracts lsass.exe in RAM and exfiltrates it via forged and crypted NTP packets. For authorized testin…
  ☆107Updated 2 months ago
• seriotonctf / Red-Team-Notes
  ☆44Updated last month
• watchtowrlabs / fortios-auth-bypass-check-CVE-2024-55591
  ☆68Updated 7 months ago
• 123ojp / GREtunnel-scanner
  This is a GRE PoC code for Talks: From Spoofing to Tunneling: New Red Team's Networking Techniques for Initial Access and Evasion
  ☆76Updated 3 weeks ago
• EQSTLab / CVE-2024-46538
  PfSense Stored XSS lead to Arbitrary Code Execution exploit
  ☆47Updated 8 months ago
• mertdas / SharpLateral
  Lateral Movement
  ☆124Updated last year
• sliverarmory / hashdump
  Dump Windows SAM hashes
  ☆42Updated 2 years ago
• ShutdownRepo / dcshadow
  Python alternative to Mimikatz lsadump::dcshadow
  ☆154Updated 2 months ago
• ad0nis / ntlm_relay_gat
  ☆161Updated last year
• watchtowrlabs / watchTowr-vs-FortiWeb-CVE-2025-25257
  ☆88Updated 2 months ago
• horizon3ai / CVE-2024-9464
  Proof of Concept Exploit for CVE-2024-9464
  ☆45Updated 11 months ago
• Leo4j / Invoke-SMBRemoting
  Interactive Shell and Command Execution over Named-Pipes (SMB) for Fileless lateral movement
  ☆176Updated 3 months ago
• Maldev-Academy / Alphabetfuscation
  Convert your shellcode into an ASCII string
  ☆114Updated 2 months ago
• Diverto / IPPrintC2
  PoC for using MS Windows printers for persistence / command and control via Internet Printing
  ☆148Updated last year
• danti1988 / adcshunter
  Uses rpcdump to locate the ADCS server, and identify if ESC8 is vulnerable from unauthenticated perspective.
  ☆83Updated last year
• sensepost / goLAPS
  Retrieve LAPS passwords from a domain. The tools is inspired in pyLAPS.
  ☆87Updated 6 months ago
• smokeme / ansible-havoc
  Scripts I use to deploy Havoc on Linode and setup categorization and SSL
  ☆42Updated last year
• mlcsec / proctools
  Small toolkit for extracting information and dumping sensitive strings from Windows processes
  ☆115Updated last year
• mlcsec / EDRenum-BOF
  Identify common EDR processes, directories, and services. Simple BOF of Invoke-EDRChecker.
  ☆123Updated 11 months ago
• ph0ebus / Tomcat-CVE-2024-50379-Poc
  RCE through a race condition in Apache Tomcat
  ☆56Updated 8 months ago
• foxlox / hypobrychium
  Duplicate not owned Token from Running Process
  ☆72Updated 2 years ago
• MinoTauro2020 / RedTeam-CRTL-Certification
  ☆18Updated 8 months ago