DDSpoof is a tool that enables DHCP DNS Dynamic Update attacks against Microsoft DHCP servers in AD environments.
☆139Apr 12, 2024Updated 2 years ago
Alternatives and similar repositories for DDSpoof
Users that are interested in DDSpoof are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆115Feb 13, 2024Updated 2 years ago
- To audit the security of read-only domain controllers☆118Nov 27, 2023Updated 2 years ago
- Implant drop-in for EDR testing☆145Nov 15, 2023Updated 2 years ago
- A C# utility for interacting with SCOM☆101Dec 2, 2025Updated 10 months ago
- ☆135Feb 11, 2025Updated last year
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Abuse leaked token handles.☆135Dec 14, 2023Updated 2 years ago
- ☆347Jun 24, 2026Updated 4 months ago
- ☆291Jul 20, 2023Updated 3 years ago
- Active Directory reconnaissance and exploitation for Red Teams via the Active Directory Web Services (ADWS).☆607Mar 19, 2024Updated 2 years ago
- Disconnected RSAT - A method of running Group Policy Manager, Certificate Authority and Certificate Templates MMC snap-ins from non-domai…☆315Mar 28, 2026Updated 7 months ago
- A Python POC for CRED1 over SOCKS5☆171Oct 5, 2024Updated 2 years ago
- ☆388Oct 17, 2025Updated last year
- This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…☆218Oct 19, 2024Updated 2 years ago
- Unbind port 445/tcp on Windows☆14Jul 11, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- .NET assembly loader with patchless AMSI and ETW bypass☆392Apr 19, 2023Updated 3 years ago
- PoC to coerce authentication from Windows hosts using MS-WSP☆307Sep 7, 2023Updated 3 years ago
- The OUned project automating Active Directory Organizational Units ACL exploitation through gPLink poisoning☆165Aug 28, 2026Updated 2 months ago
- ☆39Jan 7, 2025Updated last year
- ☆166May 5, 2025Updated last year
- A PowerShell script to perform PKINIT authentication with the Windows API from a non domain-joined machine.☆178May 13, 2024Updated 2 years ago
- ☆153Oct 2, 2023Updated 3 years ago
- Example code samples from our ScriptBlock Smuggling Blog post☆97Jun 18, 2024Updated 2 years ago
- Azure Post Exploitation Framework☆247Oct 27, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- GPOAnalyzer is a tool designed to assist in parsing domain Group Policy Object (GPO) files located in the SYSVOL directory.☆28Jun 14, 2024Updated 2 years ago
- SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Dire…☆899Feb 3, 2024Updated 2 years ago
- Bypass Credential Guard by patching WDigest.dll using only NTAPI functions☆270Apr 8, 2025Updated last year
- MaLDAPtive is a framework for LDAP SearchFilter parsing, obfuscation, deobfuscation and detection.☆351Aug 7, 2024Updated 2 years ago
- ☆193Oct 21, 2025Updated last year
- Tool for Active Directory Certificate Services enumeration and abuse☆166Apr 17, 2025Updated last year
- A tool for enumerating potential hosts that are open to GSSAPI abuse within Active Directory networks☆189Aug 16, 2025Updated last year
- A simple rpc2socks alternative in pure Go.☆31Jul 8, 2024Updated 2 years ago
- The GPOddity project, aiming at automating GPO attack vectors through NTLM relaying (and more).☆385Aug 28, 2026Updated 2 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- BadExclusionsNWBO is an evolution from BadExclusions to identify folder custom or undocumented exclusions on AV/EDR☆76Feb 9, 2024Updated 2 years ago
- A proof of concept demonstrating the DLL-load proxying using undocumented Syscalls.☆410Jan 11, 2026Updated 9 months ago
- Check for LDAP protections regarding the relay of NTLM authentication☆531Nov 19, 2024Updated last year
- Proof of Concept (PoC) .NET tool for remotely killing EDR with WDAC☆441Sep 29, 2025Updated last year
- ☆240Oct 8, 2024Updated 2 years ago
- ADCS cert template modification and ACL enumeration☆145Jun 26, 2023Updated 3 years ago
- Decrypt GlobalProtect configuration and cookie files.☆161Sep 10, 2024Updated 2 years ago