Alternatives and similar repositories for AnsibleHound

Users that are interested in AnsibleHound are comparing it to the libraries listed below

• TheManticoreProject / LDAPWordlistHarvester

  View on GitHub
  A tool that allows you to extract a client-specific wordlist from the LDAP of an Active Directory.
  ☆57Jul 2, 2025Updated 7 months ago
• G0ldenGunSec / SCCM_SQL_Collector

  View on GitHub
  PoC script to demonstrate collection of SCCM attack paths that can be viewed in BH with OpenGraph
  ☆24Aug 2, 2025Updated 6 months ago
• dirkjanm / DeviceToken

  View on GitHub
  Request device ticket/token using the device's MSA
  ☆38Aug 25, 2025Updated 5 months ago
• xpn / adfstoolkit

  View on GitHub
  ☆37Jan 7, 2025Updated last year
• p0dalirius / ShareHound

  View on GitHub
  A python tool to map the access rights of network shares into a BloodHound OpenGraphs easily
  ☆260Feb 5, 2026Updated last week
• PShlyundin / TimeSync

  View on GitHub
  Tool to obtain hash using MS-SNTP for user accounts
  ☆28Jan 22, 2025Updated last year
• trustedsec / DitExplorer

  View on GitHub
  Tool for viewing NTDS.dit
  ☆191Mar 14, 2025Updated 11 months ago
• badsectorlabs / ludus_adcs

  View on GitHub
  An Ansible Role that installs ADCS on Windows Server and optionally configures Certified Preowned templates.
  ☆17Jan 22, 2026Updated 3 weeks ago
• cogiceo / GPOHound

  View on GitHub
  Offensive GPO dumping and analysis tool that leverages and enriches BloodHound data
  ☆354Jan 8, 2026Updated last month
• 0xthirteen / Carseat

  View on GitHub
  Python implementation of GhostPack's Seatbelt situational awareness tool
  ☆270Nov 12, 2024Updated last year
• mttaggart / pwfuzz-rs

  View on GitHub
  Rust-based password mutator for brute force attacks
  ☆13Mar 21, 2025Updated 10 months ago
• bitbeans / ransodium

  View on GitHub
  like hidden-tear with libsodium
  ☆21Aug 20, 2015Updated 10 years ago
• Fudgedotdotdot / nimpersonate

  View on GitHub
  Impersonate Windows tokens in Nim
  ☆23Aug 4, 2025Updated 6 months ago
• rkbennett / RunAsPy

  View on GitHub
  ☆12May 21, 2025Updated 8 months ago
• 0xbad53c / OffSecOps-Arsenal

  View on GitHub
  Aggressor script to automatically download and load an arsenal of open source and private Cobalt Strike tooling.
  ☆45Aug 16, 2024Updated last year
• cybersectroll / TrollBlacklistDLL

  View on GitHub
  ☆43Jul 17, 2025Updated 7 months ago
• CroodSolutions / BeaconatorC2

  View on GitHub
  BeaconatorC2 is a framework for red teaming and adversarial emulation, providing a full-featured management interface, along with a catal…
  ☆92Jan 14, 2026Updated last month
• emmasolis1 / OSCP

  View on GitHub
  Repository for tools used for the OSCP
  ☆22Sep 18, 2025Updated 4 months ago
• MorDavid / vCenterHound

  View on GitHub
  Collect infrastructure and permissions data from vCenter and export it as a BloodHound‑compatible graph using Custom Nodes/Edges
  ☆174Aug 13, 2025Updated 6 months ago
• evilmog / F5-Decryption

  View on GitHub
  F5 Service Password Decryption
  ☆29Jul 31, 2025Updated 6 months ago
• EspressoCake / ADIDNS_Parser

  View on GitHub
  Parser and reconciliation tooling for large Active Directory environments.
  ☆33Feb 18, 2025Updated 11 months ago
• F41zK4r1m / GCP-Hound

  View on GitHub
  GCP-Hound - Google Cloud Security Attack Path Discovery Tool - v1.1.1
  ☆68Oct 11, 2025Updated 4 months ago
• badsectorlabs / sccm-http-looter

  View on GitHub
  Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) shares via HTTP(s)
  ☆206Sep 30, 2024Updated last year
• CICADA8-Research / RemoteKrbRelay

  View on GitHub
  Remote Kerberos Relay made easy! Advanced Kerberos Relay Framework
  ☆637May 8, 2025Updated 9 months ago
• sud0Ru / NauthNRPC

  View on GitHub
  Enumerate Domain Users Without Authentication
  ☆281Apr 22, 2025Updated 9 months ago
• NetSPI / ATEAM

  View on GitHub
  ☆140Sep 9, 2025Updated 5 months ago
• p0dalirius / FindUnusualSessions

  View on GitHub
  A tool to remotely detect unusual sessions opened on windows machines using RPC
  ☆118Jun 10, 2025Updated 8 months ago
• Yeeb1 / SockTail

  View on GitHub
  Lightweight binary that joins a device to a Tailscale network and exposes a local SOCKS5 proxy. Designed for red team operations and ephe…
  ☆500Oct 3, 2025Updated 4 months ago
• BlackHatCN / plugx

  View on GitHub
  plugx rat c2, supports TCP, UDP, HTTP
  ☆14Sep 25, 2024Updated last year
• wh1t3h4ts / usrlinks

  View on GitHub
  USRLINKS v1.0 - The Ultimate Username Reconnaissance Tool
  ☆24Oct 6, 2025Updated 4 months ago
• CCob / SQL-BOF

  View on GitHub
  Library of BOFs to interact with SQL servers
  ☆16Dec 6, 2024Updated last year
• bytewreck / DumpGuard

  View on GitHub
  Proof-of-Concept tool for extracting NTLMv1 hashes from sessions on modern Windows systems.
  ☆564Oct 27, 2025Updated 3 months ago
• csandker / pxethiefy

  View on GitHub
  ☆80Jan 26, 2025Updated last year
• SpecterOps / cred1py

  View on GitHub
  A Python POC for CRED1 over SOCKS5
  ☆164Oct 5, 2024Updated last year
• Dump-GUY / tiny_tracer_tag_to_cutter

  View on GitHub
  ☆17Feb 15, 2022Updated 4 years ago
• synacktiv / Invoke-RunAsWithCert

  View on GitHub
  A PowerShell script to perform PKINIT authentication with the Windows API from a non domain-joined machine.
  ☆171May 13, 2024Updated last year
• BlWasp / WDSFinder

  View on GitHub
  A simple tool to identify WDS servers in Active Directory
  ☆32Aug 25, 2025Updated 5 months ago
• TheTechromancer / password-smelter

  View on GitHub
  PASSWORDS, NED! IN AN OPEN FIEEEELD!!
  ☆21Jan 17, 2024Updated 2 years ago
• Karkas66 / EarlyCascadeImprooved

  View on GitHub
  an Improoved Version of 0xNinjaCyclone´s EarlyCascade Code
  ☆22Feb 20, 2025Updated 11 months ago