Alternatives and similar repositories for sh4loader

Users that are interested in sh4loader are comparing it to the libraries listed below

• synacktiv / OUned
  The OUned project automating Active Directory Organizational Units ACL exploitation through gPLink poisoning
  ☆152Updated last week
• GeisericII / Winpacket
  Impacket pre-compiled binaries
  ☆17Updated 2 years ago
• OleFredrik1 / remoteKrbRelayx
  A tool for coercing and relaying Kerberos authentication over DCOM and RPC.
  ☆141Updated 3 months ago
• andrecrafts / Bloodhound-query-legacy2ce
  A Python based tool to convert custom queries from Legacy BloodHound to BloodHound CE format, with the option to directly upload them to …
  ☆32Updated last month
• decoder-it / KrbRelay-SMBServer
  ☆228Updated last year
• BC-SECURITY / IronSharpPack
  IronSharpPack is a repo of popular C# projects that have been embedded into IronPython scripts that execute an AMSI bypass and then refle…
  ☆118Updated last year
• rtecCyberSec / RAITrigger
  Local SYSTEM auth trigger for relaying
  ☆165Updated 3 months ago
• SpecterOps / cred1py
  A Python POC for CRED1 over SOCKS5
  ☆161Updated last year
• p4p1 / havoc-privkit
  a port of privkit bof for havoc
  ☆24Updated last year
• kfallahi / UnderlayCopy
  PowerShell toolkit that extracts locked Windows files (SAM, SYSTEM, NTDS, ...) using MFT parsing and raw disk reads
  ☆185Updated 2 weeks ago
• temp43487580 / EntraPassTheCert
  tool for requesting Entra ID's P2P certificate and authenticating to a remote Entra joinned devices with it
  ☆126Updated 2 months ago
• som3canadian / Cloudflare-Redirector
  Just another C2 Redirector using CloudFlare. Support multiple C2 and multiple domains. Support for websocket listener.
  ☆175Updated 8 months ago
• Thunter-HackTeam / EvilentCoerce
  ☆150Updated 6 months ago
• ZERODETECTION / MSC_Dropper
  ☆217Updated last year
• safedv / RustSoliloquy
  A Rust implementation of Internal-Monologue — retrieving NetNTLM hashes without touching LSASS, leveraging SSPI for NTLM negotiation and …
  ☆187Updated 6 months ago
• JumpsecLabs / WALK_WebAssembly_Lure_Krafter
  A web assembly (WASM) phishing lure generator based on pre-built templates and written in Rust with some GenAI assistance. W.A.L.K. aims …
  ☆92Updated last year
• gsmith257-cyber / better-sliver
  Adversary Emulation Framework
  ☆125Updated 4 months ago
• Macmod / ldapx
  Flexible LDAP proxy that can be used to inspect & transform all LDAP packets generated by other tools on the fly.
  ☆169Updated 10 months ago
• zimedev / certipy-merged
  Tool for Active Directory Certificate Services enumeration and abuse
  ☆163Updated 6 months ago
• decoder-it / printerbugnew
  The DCERPC only printerbug.py version
  ☆152Updated 2 weeks ago
• 3lp4tr0n / RemoteMonologue
  Weaponizing DCOM for NTLM Authentication Coercions
  ☆174Updated last week
• mandiant / ccmpwn
  ☆214Updated last year
• Nomad0x7 / sekken-enum
  adws enumeration bof
  ☆154Updated last month
• Hypnoze57 / rpc2efs
  Unauthenticated start EFS service on remote Windows host (make PetitPotam great again)
  ☆104Updated 3 weeks ago
• mallo-m / Cpp-ExecAssembly
  C++ Reflective Assembly Loader
  ☆28Updated 8 months ago
• 1r0BIT / TaskHound
  Tool to enumerate privileged Scheduled Tasks on Remote Systems
  ☆128Updated this week
• ghost-ng / slinger
  An impacket-lite cli tool that combines many useful impacket functions using a single session.
  ☆54Updated last month
• exploide / bhcli
  CLI tool to interact with the BloodHound CE API
  ☆59Updated last month
• NtDallas / Svartalfheim
  Stage 0
  ☆164Updated 10 months ago
• Offensive-Panda / LsassReflectDumping
  This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…
  ☆209Updated last year