A low-priv domain user forges an Administrator certificate through the CMC `id-cmc-addExtensions` control and PKINITs to Domain Admin
☆19Jul 27, 2026Updated 3 months ago
Alternatives and similar repositories for cmc-addext
Users that are interested in cmc-addext are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- The home to the popular script named Voidware☆18Feb 10, 2025Updated last year
- ☆14Oct 1, 2025Updated last year
- A web application to parse and analyse Snaffler & Group3r output providing filtering capabilities in a nice interactive interface.☆11Sep 16, 2026Updated last month
- Simple python tool for password spraying against a 401 endpoint (basic/ntlm) when you know a lockout policy (ie will try X number of atte…☆13Jan 12, 2026Updated 10 months ago
- Python exploit for ResetNightmare☆14Aug 6, 2026Updated 3 months ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Async BOF to capture KeePass master passwords by detecting and keylogging locked database windows.☆51Jul 23, 2026Updated 3 months ago
- Map every segment you can reach (VLANs, firewall zones, subnets), then find out which of them can actually talk to each other.☆19Nov 5, 2026Updated last week
- .NET library and PowerShell module for Windows RPC filter management☆29Mar 28, 2026Updated 7 months ago
- Token Analysis and Tracking System☆44Aug 25, 2026Updated 2 months ago
- A tool for managing custom node types and Cypher queries in BloodHound☆12Dec 23, 2025Updated 10 months ago
- Python helper to generate SQL commands to create a custom update in the Windows Service Update Service (WSUS) database.☆16Jun 2, 2026Updated 5 months ago
- Rust Artifact Kit is a sophisticated research framework demonstrating advanced evasion techniques through Rust-based artifact loaders.☆14Sep 15, 2025Updated last year
- Freeze written in rust with APC shellcode injection. Shellcode is executed in signed Windows PE and its process gets unhooked using froze…☆10Jun 8, 2023Updated 3 years ago
- A Sliver C2 module for NetExec☆14Nov 3, 2026Updated last week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- DriverSentinel is a security tool developed in Go that detects malicious and vulnerable drivers on Windows systems by comparing them agai…☆36Jul 28, 2026Updated 3 months ago
- A credential extraction .NET assembly for Veeam Backup & Replication and Veeam One☆33May 14, 2026Updated 5 months ago
- A Go library to create BloodHound OpenGraphs easily☆15Jun 18, 2026Updated 4 months ago
- Polymorphic PE rewriter for Windows x64 , rewrites binaries into semantically identical but byte-different variants☆202Jun 6, 2026Updated 5 months ago
- Dumping LSA secrets: a story about task decorrelation☆15Jul 9, 2024Updated 2 years ago
- Evasion kit for Cobalt Strike☆18Oct 31, 2026Updated last week
- Active Directory snapshots from Linux and macOS in the AD Explorer .dat format. Opens in AD Explorer, works with ADExplorerSnapshot.py an…☆38Sep 11, 2026Updated 2 months ago
- CVE-2025-59501 POC code☆26Nov 20, 2025Updated 11 months ago
- Dump TGTs remotely and convert Windows' klist binary output to ccache.☆107Aug 6, 2026Updated 3 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Impacket is a collection of Python classes for working with network protocols.☆25Oct 27, 2026Updated 2 weeks ago
- krbrelayx fork that defeats enforced SMB signing on an SMB relay (opt-in --reauth-bypass).☆80Oct 21, 2026Updated 3 weeks ago
- An Ansible collection that installs a SCOM deployment with optional configurations.☆24Dec 9, 2025Updated 11 months ago
- Windbg extension port for rp++ is a fast C++ ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM/ARM64 binaries.☆13Sep 20, 2026Updated last month
- Technical documentation, reverse engineering research, and tools for the Windows Endpoint Security Platform (WESP).☆83Sep 18, 2026Updated last month
- ☆15Mar 7, 2025Updated last year
- Mythic C2 MSTeams Communication Channel☆42Sep 13, 2026Updated last month
- Helps defenders find their WSUS configurations in the wake of CVE-2025-59287☆46Oct 28, 2025Updated last year
- Tools for CES abuse☆51Sep 29, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A tool for exploiting Kerberos tickets against system with Credential Guard enabled.☆23Sep 2, 2025Updated last year
- RBCD Attack Path enumeration tool for attackers and defenders☆15Apr 25, 2026Updated 6 months ago
- Chess.com unlimited analysis (server side) for free tier!☆36May 25, 2026Updated 5 months ago
- LPE Proof-of-Concept for Windows 11 abusing TrustedInstaller's Component Based Servicing (CBS) session COM object and junctions for arbit…☆63Nov 1, 2026Updated last week
- ☆25Sep 6, 2025Updated last year
- Mythic Agent to perform Breach & Attack Simulations☆35Updated this week
- Demonstrating 3 persistence layers from a single EXE, that converts itself into proxy DLLs at runtime☆109Mar 29, 2026Updated 7 months ago
Are these results useful?