Alternatives and similar repositories for Invoke-PassTheCert

Users that are interested in Invoke-PassTheCert are comparing it to the libraries listed below

• Helixo32 / GetSystem-LCI

  View on GitHub
  GetSystem-LCI is a PowerShell script to escalate privileges from Administrator to NT AUTHORITY\SYSTEM by abusing LanguageComponentsInstal…
  ☆35Nov 24, 2024Updated last year
• b5null / Invoke-BadSuccessor.ps1

  View on GitHub
  PowerShell Script to automatically abuse the BadSuccessor vulnerability (CVE-2025-53779)
  ☆44Nov 19, 2025Updated 2 months ago
• winsecurity / AMSI-Bypass-HWBP

  View on GitHub
  ☆26Aug 11, 2025Updated 6 months ago
• api0cradle / usernamecrafter

  View on GitHub
  A C project that generates usernames based on input lists and format you decide yourself
  ☆11Jan 23, 2025Updated last year
• Leo4j / PowerDACL

  View on GitHub
  A tool to abuse weak permissions of Active Directory Discretionary Access Control Lists (DACLs) and Access Control Entries (ACEs)
  ☆61Feb 4, 2026Updated last week
• decoder-it / KrbRelayEx-RPC

  View on GitHub
  ☆198Mar 28, 2025Updated 10 months ago
• heartburn-dev / PKI-Escalate

  View on GitHub
  Quick and dirty PowerShell script to abuse the overly permissive capabilities of the SYSTEM user in a child domain on the Public Key Serv…
  ☆29Jul 25, 2023Updated 2 years ago
• garrettfoster13 / ldap_bofs

  View on GitHub
  Random BOFs for LDAP tradecraft
  ☆72Sep 9, 2025Updated 5 months ago
• Leo4j / ShellGen

  View on GitHub
  PowerShell script to generate ShellCode in various formats
  ☆45Sep 25, 2024Updated last year
• thelikes / arsenal

  View on GitHub
  miscellaneous sploit scripts/hacks
  ☆18Feb 3, 2025Updated last year
• sud0Ru / NauthNRPC

  View on GitHub
  Enumerate Domain Users Without Authentication
  ☆281Apr 22, 2025Updated 9 months ago
• 0xdea / blindsight

  View on GitHub
  Red teaming tool to dump LSASS memory, bypassing basic countermeasures.
  ☆245Nov 2, 2025Updated 3 months ago
• smokeme / asar-backdoor

  View on GitHub
  ☆33Mar 19, 2025Updated 10 months ago
• OtterHacker / AWSRoundRobin

  View on GitHub
  ☆41Feb 20, 2025Updated 11 months ago
• 7hePr0fess0r / ADCSDevilCOM

  View on GitHub
  A C# tool for requesting certificates from ADCS using DCOM over SMB. This tool allows you to remotely request X.509 certificates from CA …
  ☆163Nov 2, 2025Updated 3 months ago
• xforcered / RemoteMonologue

  View on GitHub
  Weaponizing DCOM for NTLM Authentication Coercions
  ☆275Jul 1, 2025Updated 7 months ago
• rix4uni / xssrecon

  View on GitHub
  XSSRecon automates the process of testing URL parameters for reflection of a test payload rix4uni and further checks how special characte…
  ☆51Jan 16, 2026Updated 3 weeks ago
• GeisericII / Winpacket

  View on GitHub
  Impacket pre-compiled binaries
  ☆18Jul 31, 2023Updated 2 years ago
• dr4ndrei / OHFFLdr

  View on GitHub
  One-header configurable C++20 COFF loader
  ☆21Jul 21, 2025Updated 6 months ago
• trustedsec / DitExplorer

  View on GitHub
  Tool for viewing NTDS.dit
  ☆191Mar 14, 2025Updated 11 months ago
• Faran-17 / Hellshazzard

  View on GitHub
  Indirect Syscall implementation to bypass userland NTAPIs hooking.
  ☆84Aug 13, 2024Updated last year
• jborean93 / AmsiProvider

  View on GitHub
  Test AMSI Provider implementation in C#
  ☆42Dec 18, 2024Updated last year
• decoder-it / KrbRelay-SMBServer

  View on GitHub
  ☆235Oct 8, 2024Updated last year
• kleiton0x00 / RtlHijack

  View on GitHub
  Alternative Read and Write primitives using Rtl* functions the unintended way.
  ☆78Aug 25, 2025Updated 5 months ago
• Teach2Breach / dll2shell

  View on GitHub
  converts sRDI compatible dlls to shellcode
  ☆35Jan 20, 2025Updated last year
• x0xr00t / sl0ppy-PrivescTaskCreator

  View on GitHub
  sl0ppy-PrivescTaskCreator.ps1
  ☆40Oct 8, 2025Updated 4 months ago
• DarkSpaceSecurity / SSH-Stealer

  View on GitHub
  Smart keylogging capability to steal SSH Credentials including password & Private Key
  ☆151Mar 26, 2025Updated 10 months ago
• brosck / Rebellion

  View on GitHub
  「⚔️」Ring 0 Rootkit for Linux Kernels x86/x86_64 5.x/6.x
  ☆27Apr 10, 2025Updated 10 months ago
• LuemmelSec / PMP-Decrypter

  View on GitHub
  ☆41Sep 9, 2023Updated 2 years ago
• synacktiv / sccmsqlclient

  View on GitHub
  ☆26Aug 5, 2025Updated 6 months ago
• Paradoxis / ADSyncDump-BOF

  View on GitHub
  The ADSyncDump BOF is a port of Dirk-Jan Mollema's adconnectdump.py / ADSyncDecrypt into a Beacon Object File (BOF) with zero dependencie…
  ☆172Sep 3, 2025Updated 5 months ago
• alex3O / BYOVD-DriverKiller

  View on GitHub
  Driver Reverse & Exploitation
  ☆82Sep 4, 2025Updated 5 months ago
• redr0nin / CVE-2024-38143

  View on GitHub
  Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability
  ☆24Feb 5, 2025Updated last year
• werdhaihai / msi_lateral_mv

  View on GitHub
  Lateral Movement Bof with MSI ODBC Driver Install
  ☆144Sep 30, 2025Updated 4 months ago
• sagiol / Terms-of-What

  View on GitHub
  Terms of Use Conditional Access M365 Evilginx Phishlet
  ☆44Jun 23, 2025Updated 7 months ago
• klezVirus / RAIWhateverTrigger

  View on GitHub
  Local SYSTEM auth trigger for relaying - X
  ☆155Jul 23, 2025Updated 6 months ago
• zero2504 / EDR-GhostLocker

  View on GitHub
  AppLocker-Based EDR Neutralization
  ☆302Dec 19, 2025Updated last month
• SpecterOps / JamfHound

  View on GitHub
  JamfHound is a python3 project designed to collect and identify attack paths in Jamf Pro tenants based on existing object permissions by …
  ☆117Sep 2, 2025Updated 5 months ago
• Leo4j / Invoke-SMBRemoting

  View on GitHub
  Interactive Shell and Command Execution over Named-Pipes (SMB) for Fileless lateral movement
  ☆181May 19, 2025Updated 8 months ago