Alternatives and similar repositories for DDSpoof

Users that are interested in DDSpoof are comparing it to the libraries listed below

• HuskyHacks / SharpTokenFinder
  C# implementation of TokenFinder. Steal M365 access tokens from Office Desktop apps
  ☆140Updated 11 months ago
• sud0Ru / NauthNRPC
  Enumerate Domain Users Without Authentication
  ☆239Updated 2 months ago
• Offensive-Panda / LsassReflectDumping
  This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…
  ☆202Updated 8 months ago
• CCob / gssapi-abuse
  A tool for enumerating potential hosts that are open to GSSAPI abuse within Active Directory networks
  ☆159Updated last year
• powerseb / PowerExtract
  ☆118Updated 3 months ago
• trustedsec / DitExplorer
  Tool for viewing NTDS.dit
  ☆173Updated 4 months ago
• ad0nis / ntlm_relay_gat
  ☆159Updated last year
• improsec / BackupOperatorToolkit
  The BackupOperatorToolkit contains different techniques allowing you to escalate from Backup Operator to Domain Admin
  ☆176Updated 2 years ago
• mertdas / SharpLateral
  Lateral Movement
  ☆124Updated last year
• dadevel / mssql-spider
  Automated exploitation of MSSQL servers at scale
  ☆109Updated 3 weeks ago
• danti1988 / adcshunter
  Uses rpcdump to locate the ADCS server, and identify if ESC8 is vulnerable from unauthenticated perspective.
  ☆82Updated 10 months ago
• RedTeamPentesting / adauth
  Active Directory Authentication Library
  ☆77Updated last week
• sensepost / susinternals
  psexecsvc - a python implementation of PSExec's native service implementation
  ☆204Updated 5 months ago
• adityatelange / evil-winrm-py
  Execute commands interactively on remote Windows machines using the WinRM protocol
  ☆167Updated 2 weeks ago
• synacktiv / OUned
  The OUned project automating Active Directory Organizational Units ACL exploitation through gPLink poisoning
  ☆118Updated 3 months ago
• JPG0mez / ADCSync
  Use ESC1 to perform a makeshift DCSync and dump hashes
  ☆209Updated last year
• rtecCyberSec / BitlockMove
  Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking
  ☆255Updated 2 weeks ago
• Leo4j / Invoke-SMBRemoting
  Interactive Shell and Command Execution over Named-Pipes (SMB) for Fileless lateral movement
  ☆173Updated last month
• trustedsec / specula
  ☆201Updated last month
• mandiant / ccmpwn
  ☆206Updated last year
• quarkslab / proxyblob
  SOCKS5 proxy tool that uses Azure Blob Storage as a means of communication.
  ☆221Updated 2 months ago
• t94j0 / adexplorersnapshot-rs
  ☆82Updated 11 months ago
• nixpal / shellsilo
  SHELLSILO is a cutting-edge tool that translates C syntax into syscall assembly and its corresponding shellcode. It streamlines the proce…
  ☆132Updated 8 months ago
• 1njected / CMLoot
  Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) SMB shares
  ☆175Updated 2 years ago
• 3lp4tr0n / RemoteMonologue
  Weaponizing DCOM for NTLM Authentication Coercions
  ☆154Updated 2 weeks ago
• gsmith257-cyber / better-sliver
  Adversary Emulation Framework
  ☆119Updated 2 weeks ago
• Leo4j / Invoke-SessionHunter
  Retrieve and display information about active user sessions on remote computers. No admin privileges required.
  ☆187Updated 11 months ago
• 0xdea / blindsight
  Red teaming tool to dump LSASS memory, bypassing basic countermeasures.
  ☆228Updated 6 months ago
• cybersectroll / TrollAMSI
  ☆180Updated last month
• sevagas / Advanced_Initial_access_in_2024_OffensiveX
  Resources linked to my presentation at OffensiveX in Athens in June 2024 on the topic "Breach the Gat, Advanced Initial Access in 2024"
  ☆142Updated 11 months ago