Hekatomb is a python script that connects to LDAP directory to retrieve all computers and users informations. Then it will download all DPAPI blob of all users from all computers and uses Domain backup keys to decrypt them.
☆518Jul 31, 2024Updated 2 years ago
Alternatives and similar repositories for HEKATOMB
Users that are interested in HEKATOMB are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Dumping DPAPI credz remotely☆1,431Sep 9, 2026Updated last month
- In-depth ldap enumeration utility☆610Oct 18, 2026Updated 2 weeks ago
- A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.☆2,345Apr 24, 2026Updated 6 months ago
- Python library with CLI allowing to remotely dump domain user credentials via an ADCS without dumping the LSASS process memory☆404Aug 15, 2025Updated last year
- FindUncommonShares is a Python script allowing to quickly find uncommon shares in vast Windows Domains, and filter by READ or WRITE acces…☆437Oct 1, 2026Updated last month
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- DPAPI looting in Python☆576Oct 27, 2026Updated last week
- Dump NTDS with golden certificates and UnPAC the hash☆649Mar 20, 2024Updated 2 years ago
- The GPOddity project, aiming at automating GPO attack vectors through NTLM relaying (and more).☆384Aug 28, 2026Updated 2 months ago
- PowerHuntShares is an audit script designed in inventory, analyze, and report excessive privileges configured on Active Directory domains…☆1,068Oct 15, 2025Updated last year
- Fully featured and community-driven hacking environment☆3,119Oct 17, 2026Updated 2 weeks ago
- Tool to automatically exploit Active Directory privilege escalation paths shown by BloodHound☆721Oct 23, 2025Updated last year
- Dominate Active Directory with PowerShell.☆1,210Sep 17, 2026Updated last month
- DavRelayUp - a universal no-fix local privilege escalation in domain-joined windows workstations where LDAP signing is not enforced (the …☆582Jun 5, 2023Updated 3 years ago
- Check for LDAP protections regarding the relay of NTLM authentication☆532Nov 19, 2024Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- GeoWordlists is a tool to generate wordlists of passwords containing cities at a defined distance around the client city.☆166Feb 11, 2025Updated last year
- linWinPwn is a bash script that streamlines the use of a number of Active Directory tools☆2,233Sep 30, 2026Updated last month
- VULNSPY regularly retrieves the latest alerts published by the CERT-FR and the related vulnerabilities with their CVSS score and allows y…☆38Nov 3, 2022Updated 4 years ago
- Active Directory data ingestor for BloodHound Legacy written in Rust. 🦀☆1,183Oct 21, 2024Updated 2 years ago
- AD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover se…☆1,584Mar 18, 2026Updated 7 months ago
- Arsenal is just a quick inventory and launcher for hacking programs☆3,816Nov 29, 2024Updated last year
- smbclient-ng, a fast and user friendly way to interact with SMB shares.☆1,077Sep 29, 2026Updated last month
- Spider entire networks for juicy files sitting on SMB shares. Search filenames or file content - regex supported!☆1,437Updated this week
- SCCMHunter is a post-ex tool built to streamline identifying, profiling, and attacking SCCM related assets in an Active Directory domain.…☆961Updated this week
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Assess the security of your Active Directory with few or all privileges.☆389Sep 13, 2026Updated last month
- BloodyAD is an Active Directory Privilege Escalation Framework☆2,337Oct 25, 2026Updated last week
- A python tool to automate KeePass discovery and secret extraction.☆530Dec 12, 2024Updated last year
- Bypassing Kerberoast Detections with Modified KDC Options and Encryption Types☆422Mar 21, 2025Updated last year
- Amnesiac is a post-exploitation framework entirely written in PowerShell and designed to assist with lateral movement within Active Direc…☆453Oct 1, 2025Updated last year
- Your MitM sidekick for relaying attacks featuring DHCPv6 DNS takeover as well as mDNS, LLMNR and NetBIOS-NS spoofing.☆1,329Jul 3, 2026Updated 4 months ago
- Quietly enumerate an Active Directory Domain via LDAP parsing users, admins, groups, etc.☆501Jan 23, 2023Updated 3 years ago
- pysnaffler☆112Jan 6, 2026Updated 9 months ago
- Partial python implementation of SharpGPOAbuse☆605Jun 13, 2026Updated 4 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )☆2,975Feb 27, 2026Updated 8 months ago
- A tool to work with all types of Kerberos delegations (unconstrained, constrained, and resource-based constrained delegations) in Active …☆224Oct 9, 2026Updated 3 weeks ago
- Python script for extracting and decrypting Group Policy Preferences passwords☆26May 28, 2021Updated 5 years ago
- Find vulnerabilities in AD Group Policy, but do it better than Grouper2 did.☆982Apr 8, 2025Updated last year
- A (partial) Python rewriting of PowerSploit's PowerView☆1,147Apr 21, 2026Updated 6 months ago
- Extract credentials from lsass remotely☆2,212Sep 9, 2026Updated last month
- Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling☆1,301Mar 19, 2025Updated last year