Alternatives and similar repositories for pretender:

Users that are interested in pretender are comparing it to the libraries listed below

• Idov31 / Sandman
  Sandman is a NTP based backdoor for red team engagements in hardened networks.
  ☆784Updated 10 months ago
• optiv / Freeze
  Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods
  ☆1,430Updated last year
• knavesec / CredMaster
  Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling
  ☆1,011Updated 6 months ago
• lkarlslund / ldapnomnom
  Quietly and anonymously bruteforce Active Directory usernames at insane speeds from Domain Controllers by (ab)using LDAP Ping requests (c…
  ☆1,024Updated 3 months ago
• mgeeky / PackMyPayload
  A PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file form…
  ☆897Updated 8 months ago
• FalconForceTeam / SOAPHound
  SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Dire…
  ☆713Updated last year
• zblurx / certsync
  Dump NTDS with golden certificates and UnPAC the hash
  ☆632Updated 11 months ago
• optiv / Mangle
  Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs
  ☆1,183Updated last year
• p0dalirius / Coercer
  A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.
  ☆1,891Updated last week
• ps1337 / reinschauer
  it is very good
  ☆505Updated 2 years ago
• CompassSecurity / BloodHoundQueries
  ☆653Updated 3 weeks ago
• outflanknl / C2-Tool-Collection
  A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techni…
  ☆1,179Updated last year
• grimlockx / ADCSKiller
  An ADCS Exploitation Automation Tool Weaponizing Certipy and Coercer
  ☆705Updated last year
• CravateRouge / bloodyAD
  BloodyAD is an Active Directory Privilege Escalation Framework
  ☆1,508Updated 2 weeks ago
• CravateRouge / autobloody
  Tool to automatically exploit Active Directory privilege escalation paths shown by BloodHound
  ☆514Updated 3 months ago
• optiv / Ivy
  Ivy is a payload creation framework for the execution of arbitrary VBA (macro) source code directly in memory. Ivy’s loader does this by …
  ☆742Updated last year
• NH-RED-TEAM / RustHound
  Active Directory data ingestor for BloodHound Legacy written in Rust. 🦀
  ☆979Updated 3 months ago
• ShutdownRepo / pywhisker
  Python version of the C# tool for "Shadow Credentials" attacks
  ☆671Updated last week
• skahwah / SQLRecon
  A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.
  ☆694Updated last month
• optiv / Go365
  An Office365 User Attack Tool
  ☆628Updated 11 months ago
• p0dalirius / windows-coerced-authentication-methods
  A list of methods to coerce a windows machine to authenticate to an attacker-controlled machine through a Remote Procedure Call (RPC) wit…
  ☆511Updated 2 weeks ago
• chvancooten / NimPlant
  A light-weight first-stage C2 implant written in Nim (and Rust).
  ☆826Updated 6 months ago
• knavesec / Max
  Maximizing BloodHound. Max is a good boy.
  ☆504Updated 3 weeks ago
• Wh04m1001 / DFSCoerce
  ☆760Updated 2 years ago
• naksyn / Pyramid
  a tool to help operate in EDRs' blind spots
  ☆705Updated 2 months ago
• antonioCoco / JuicyPotatoNG
  Another Windows Local Privilege Escalation from Service Account to System
  ☆829Updated 2 years ago
• aniqfakhrul / powerview.py
  Just another Powerview alternative
  ☆568Updated this week
• wsummerhill / C2_RedTeam_CheatSheets
  Useful C2 techniques and cheatsheets learned from engagements
  ☆462Updated 4 months ago
• login-securite / DonPAPI
  Dumping DPAPI credz remotely
  ☆1,067Updated 3 months ago
• r4wd3r / Suborner
  ☆469Updated 3 months ago