Alternatives and similar repositories for vermilion:

Users that are interested in vermilion are comparing it to the libraries listed below

• sensepost / goLAPS
  Retrieve LAPS passwords from a domain. The tools is inspired in pyLAPS.
  ☆82Updated last month
• Aur3ns / Morpheus
  Morpheus is a memory dumper that extracts lsass.exe in RAM and exfiltrates it via forged NTP packets. It uses RC4 encryption and Reed-Sol…
  ☆90Updated 3 weeks ago
• keywa7 / keywa7
  The tool that bypasses the firewall's Application Based Rules and lets you connect to anywhere, ANY IP, ANY PORT and ANY APPLICATION.
  ☆61Updated 8 months ago
• 0xBienCuit / InfraRed-AWS
  ☆58Updated 6 months ago
• DarkSpaceSecurity / RunAs-Stealer
  RunAs Utility Credential Stealer implementing 3 techniques : Hooking CreateProcessWithLogonW, Smart Keylogging, Remote Debugging
  ☆183Updated last month
• The-Viper-One / Invoke-RDPThief
  Inject RDPThief into memory with PowerShell.
  ☆62Updated 3 months ago
• safedv / RustSoliloquy
  A Rust implementation of Internal-Monologue — retrieving NetNTLM hashes without touching LSASS, leveraging SSPI for NTLM negotiation and …
  ☆161Updated 4 months ago
• nbaertsch / AutoAppDomainHijack
  Automated .NET AppDomain hijack payload generation
  ☆123Updated 2 months ago
• MWR-CyberSec / AD-CS-Forest-Exploiter
  Exploit AD CS misconfiguration allowing privilege escalation and persistence from any child domain to full forest compromise
  ☆95Updated last year
• seriotonctf / Red-Team-Notes
  ☆38Updated this week
• 0xhav0c / MailSecOps
  MailSecOps is an email and mail gateway security testing tool. With this script, you can perform mail spoofing, relay tests and security …
  ☆54Updated 5 months ago
• hdbreaker / Nimhawk
  A powerful, modular, lightweight and efficient command & control framework written in Nim.
  ☆77Updated this week
• chebuya / exploits
  Repo for all my exploits/PoCs
  ☆50Updated 2 months ago
• CyberSecurityUP / Windows-API-for-Red-Team
  ☆69Updated last year
• watchtowrlabs / fortios-auth-bypass-poc-CVE-2024-55591
  ☆51Updated 2 months ago
• CICADA8-Research / Penetration
  Our Tips&Tricks
  ☆115Updated 2 months ago
• CyberSecurityUP / Awesome-EDR-Evasion
  ☆83Updated 2 months ago
• DarkSpaceSecurity / SSH-Stealer
  Smart keylogging capability to steal SSH Credentials including password & Private Key
  ☆125Updated last month
• itaymigdal / LOLSpoof
  An interactive shell to spoof some LOLBins command line
  ☆184Updated last year
• t3l3machus / ACEshark
  ACEshark is a utility designed for rapid extraction and analysis of Windows service configurations and Access Control Entries, eliminatin…
  ☆109Updated 3 months ago
• logangoins / Stifle
  .NET Post-Exploitation Utility for Abusing Explicit Certificate Mappings in ADCS
  ☆140Updated 2 months ago
• CodeXTF2 / WebcamBOF
  Webcam capture capability for Cobalt Strike as a BOF, with in-memory download options
  ☆136Updated last month
• matro7sh / matro7sh_loaders
  this script adds the ability to encode shellcode (.bin) in XOR,chacha20, AES. You can choose between 2 loaders (Myph / 221b)
  ☆82Updated last year
• sinsinology / CVE-2024-29849
  Veeam Backup Enterprise Manager Authentication Bypass (CVE-2024-29849)
  ☆87Updated 10 months ago
• Brut-Security / CVE-2024-4879
  CVE-2024-4879 - Jelly Template Injection Vulnerability in ServiceNow
  ☆23Updated 9 months ago
• ASP4RUX / bypassEDR-AV
  ☆55Updated 5 months ago
• danti1988 / adcshunter
  Uses rpcdump to locate the ADCS server, and identify if ESC8 is vulnerable from unauthenticated perspective.
  ☆80Updated 7 months ago
• DarkSpaceSecurity / DocEx
  APT Emulation tool to exfiltrate sensitive .docx, .pptx, .xlsx, .pdf files
  ☆70Updated 3 weeks ago
• p4p1 / havoc-bloodhound
  A GUI wrapper inside of Havoc to interact with bloodhound CE
  ☆71Updated last year
• synacktiv / CVE-2024-43468
  ☆83Updated 3 months ago