Hekatomb is a python script that connects to LDAP directory to retrieve all computers and users informations. Then it will download all DPAPI blob of all users from all computers and uses Domain backup keys to decrypt them.
☆522Jul 31, 2024Updated 2 years ago
Alternatives and similar repositories for HEKATOMB
Users that are interested in HEKATOMB are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Dumping DPAPI credz remotely☆1,423Sep 9, 2026Updated 2 weeks ago
- Powershell commands for enumeration in Windows Active Directory environment.☆50Oct 5, 2022Updated 3 years ago
- Python library with CLI allowing to remotely dump domain user credentials via an ADCS without dumping the LSASS process memory☆405Aug 15, 2025Updated last year
- In-depth ldap enumeration utility☆606Aug 20, 2026Updated last month
- The GPOddity project, aiming at automating GPO attack vectors through NTLM relaying (and more).☆380Aug 28, 2026Updated 3 weeks ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Dump NTDS with golden certificates and UnPAC the hash☆650Mar 20, 2024Updated 2 years ago
- A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.☆2,322Apr 24, 2026Updated 5 months ago
- PowerHuntShares is an audit script designed in inventory, analyze, and report excessive privileges configured on Active Directory domains…☆1,060Oct 15, 2025Updated 11 months ago
- Fully featured and community-driven hacking environment☆3,093Updated this week
- DPAPI looting in Python☆573Sep 14, 2026Updated last week
- Active Directory data ingestor for BloodHound Legacy written in Rust. 🦀☆1,171Oct 21, 2024Updated last year
- VULNSPY regularly retrieves the latest alerts published by the CERT-FR and the related vulnerabilities with their CVSS score and allows y…☆38Nov 3, 2022Updated 3 years ago
- DavRelayUp - a universal no-fix local privilege escalation in domain-joined windows workstations where LDAP signing is not enforced (the …☆576Jun 5, 2023Updated 3 years ago
- Check for LDAP protections regarding the relay of NTLM authentication☆531Nov 19, 2024Updated last year
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Spider entire networks for juicy files sitting on SMB shares. Search filenames or file content - regex supported!☆1,411Updated this week
- Arsenal is just a quick inventory and launcher for hacking programs☆3,797Nov 29, 2024Updated last year
- A python tool to automate KeePass discovery and secret extraction.☆531Dec 12, 2024Updated last year
- FindUncommonShares is a Python script allowing to quickly find uncommon shares in vast Windows Domains, and filter by READ or WRITE acces…☆434Nov 12, 2025Updated 10 months ago
- Dominate Active Directory with PowerShell.☆1,202Sep 17, 2026Updated last week
- Tool to automatically exploit Active Directory privilege escalation paths shown by BloodHound☆714Oct 23, 2025Updated 11 months ago
- AD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover se…☆1,566Mar 18, 2026Updated 6 months ago
- pysnaffler☆110Jan 6, 2026Updated 8 months ago
- SCCMHunter is a post-ex tool built to streamline identifying, profiling, and attacking SCCM related assets in an Active Directory domain.…☆947Jun 25, 2026Updated 2 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- A tool to generate a wordlist from the information present in LDAP, in order to crack passwords of domain accounts.☆379Mar 24, 2026Updated 6 months ago
- Partial python implementation of SharpGPOAbuse☆595Jun 13, 2026Updated 3 months ago
- Python script for extracting and decrypting Group Policy Preferences passwords☆26May 28, 2021Updated 5 years ago
- GeoWordlists is a tool to generate wordlists of passwords containing cities at a defined distance around the client city.☆166Feb 11, 2025Updated last year
- Amnesiac is a post-exploitation framework entirely written in PowerShell and designed to assist with lateral movement within Active Direc…☆452Oct 1, 2025Updated 11 months ago
- Bypassing Kerberoast Detections with Modified KDC Options and Encryption Types☆421Mar 21, 2025Updated last year
- Assess the security of your Active Directory with few or all privileges.☆385Sep 13, 2026Updated last week
- Your MitM sidekick for relaying attacks featuring DHCPv6 DNS takeover as well as mDNS, LLMNR and NetBIOS-NS spoofing.☆1,323Jul 3, 2026Updated 2 months ago
- Quietly enumerate an Active Directory Domain via LDAP parsing users, admins, groups, etc.☆502Jan 23, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- linWinPwn is a bash script that streamlines the use of a number of Active Directory tools☆2,218Updated this week
- Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling☆1,292Mar 19, 2025Updated last year
- smbclient-ng, a fast and user friendly way to interact with SMB shares.☆1,067Jul 21, 2026Updated 2 months ago
- a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )☆2,938Feb 27, 2026Updated 6 months ago
- Extract credentials from lsass remotely☆2,211Sep 9, 2026Updated 2 weeks ago
- Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel☆415Apr 26, 2026Updated 4 months ago
- ☆176Nov 3, 2025Updated 10 months ago