Attack path mapping for Active Directory, ADCS, SCCM, and MSSQL using BloodHound CE + OpenGraph data.
☆246Aug 9, 2026Updated 3 months ago
Alternatives and similar repositories for AD-PathFinder
Users that are interested in AD-PathFinder are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Pass-the-Passkey Family of Attacks☆233Sep 14, 2026Updated last month
- Go (formerly PowerShell) collector for adding MSSQL attack paths to BloodHound with OpenGraph☆348Jul 10, 2026Updated 3 months ago
- Cobalt Strike BOF that extracts selected Windows registry hives directly from a raw NTFS volume by parsing NTFS metadata and reading file…☆111Oct 11, 2026Updated 3 weeks ago
- Code and data for our paper "Onelogon: Taking over Active Directory Accounts via Netlogon" (WOOT’26).☆129Sep 1, 2026Updated 2 months ago
- A Bloodhound alternative. BloodBash will ingest the same files bloodhound does but no server is required to use this tool. It's great for…☆502Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Wonka is a sweet Windows tool that extracts Kerberos tickets from the Local Security Authority (LSA) cache. Like finding a ticket, but fo…☆177Jun 19, 2026Updated 4 months ago
- A python tool to map the access rights of network shares into a BloodHound OpenGraphs easily☆317Aug 30, 2026Updated 2 months ago
- Enumerate user accounts and registered authentication methods via the Microsoft Self-Service Password Reset (SSPR) portal☆60Sep 15, 2026Updated last month
- Ask the Web Account Manager (WAM) for Entra ID tokens☆167Sep 11, 2026Updated last month
- Repository for various Beacon Object Files (BOFs)☆184Oct 22, 2026Updated 2 weeks ago
- A Windows tool that converts LDIF files to BloodHound CE☆34Dec 20, 2025Updated 10 months ago
- Tool to authenticate to an LDAP/S server with a certificate through Schannel written in Rust. 🦀☆77Oct 10, 2026Updated 3 weeks ago
- Recover NT hashes from NetNTLMv1 responses using local WebGPU computation and local/remote table lookup☆150Oct 7, 2026Updated last month
- Automated Pass-the-Ticket (PtT) attack. Standalone alternative to Rubeus and Mimikatz for this attack. In C#, C++, Crystal, Python, Rust,…☆159Aug 31, 2026Updated 2 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- This cheatsheet maps common impacket workflows to their modern alternatives☆311May 30, 2026Updated 5 months ago
- InfraGuard is a Command & Control Redirection Proxy and Manager which protects your Red Team Infrastructure against threat attribution☆334Oct 22, 2026Updated 2 weeks ago
- GhostHound is a BloodHound OpenGraph extension that surfaces Active Directory tombstone reanimation as a first-class attack path, enumera…☆47Aug 9, 2026Updated 2 months ago
- Active Directory pentest methodology for Claude Code: skills, agents and slash commands for internal AD red-team work (Kerberoasting, ADC…☆216Aug 24, 2026Updated 2 months ago
- Python collector for adding SCCM attack paths to BloodHound with OpenGraph☆157Oct 31, 2026Updated last week
- Dump TGTs remotely and convert Windows' klist binary output to ccache.☆105Aug 6, 2026Updated 3 months ago
- another PrivEsc potato...☆122Sep 5, 2026Updated 2 months ago
- Erebus is an Initial Access wrapper for the Mythic Command & Control Server. It converts shellcode into payloads specifically used for ph…☆242Sep 13, 2026Updated last month
- Local SYSTEM auth trigger for relaying☆175Jul 22, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- The DCERPC only printerbug.py version☆234Oct 30, 2025Updated last year
- A community maintained repository of Beacon Object Files (BOFs) for red team operations, research, and education. Our goal is to provide …☆34Aug 8, 2026Updated 3 months ago
- An alternative to the builtin clipboard feature in Cobalt Strike that adds the capability to enable/disable and dump the clipboard histor…☆117Apr 16, 2026Updated 6 months ago
- (STILL.. EDR-evading) Password hash dumper for MacOS☆21Jul 8, 2026Updated 4 months ago
- A compiled language for Windows position-independent x86-64 shellcode and Beacon Object Files.☆322Jun 28, 2026Updated 4 months ago
- Dominate the domain. Relay to royalty.☆360Mar 31, 2026Updated 7 months ago
- Async BOF to automatically extract or renew Kerberos TGTs on a target system.☆138Jul 23, 2026Updated 3 months ago
- Enumerate Domain Users Without Authentication☆314Apr 22, 2025Updated last year
- Remote service-staging tool built on Impacket, designed for BOF-style lateral movement workflows that lets you upload custom service load…☆132Dec 7, 2025Updated 11 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- SpicyAD is a C# Active Directory penetration testing tool designed for authorized security assessments. It combines multiple AD attack te…☆112Sep 9, 2026Updated last month
- Active Directory information dumper via ADWS for evasion purposes.☆325Oct 12, 2026Updated 3 weeks ago
- Lnk crafting and research tools☆187Mar 4, 2026Updated 8 months ago
- NØW is a word-based shellcode encoding and obfuscation tool that transforms raw shellcode bytes into natural-looking English prose.☆92Jun 24, 2026Updated 4 months ago
- ☆109Sep 18, 2026Updated last month
- Entra ID user enumeration and auth method discovery via the public GetCredentialType API☆178Sep 29, 2026Updated last month
- Authenticode signature manipulation toolkit for Red Team operations and security research. Covers signature stealing, metadata cloning, S…☆144Aug 13, 2026Updated 2 months ago