Alternatives and similar repositories for DDSpoof

Users that are interested in DDSpoof are comparing it to the libraries listed below

• CCob / gssapi-abuse
  A tool for enumerating potential hosts that are open to GSSAPI abuse within Active Directory networks
  ☆165Updated last year
• HuskyHacks / SharpTokenFinder
  C# implementation of TokenFinder. Steal M365 access tokens from Office Desktop apps
  ☆140Updated last year
• ad0nis / ntlm_relay_gat
  ☆159Updated last year
• Leo4j / Invoke-SMBRemoting
  Interactive Shell and Command Execution over Named-Pipes (SMB) for Fileless lateral movement
  ☆174Updated 2 months ago
• powerseb / PowerExtract
  ☆118Updated 4 months ago
• SpecterOps / MSSQLHound
  PowerShell collector for adding MSSQL attack paths to BloodHound with OpenGraph
  ☆107Updated last week
• Offensive-Panda / LsassReflectDumping
  This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…
  ☆204Updated 9 months ago
• mertdas / SharpLateral
  Lateral Movement
  ☆124Updated last year
• trustedsec / DitExplorer
  Tool for viewing NTDS.dit
  ☆174Updated 4 months ago
• danti1988 / adcshunter
  Uses rpcdump to locate the ADCS server, and identify if ESC8 is vulnerable from unauthenticated perspective.
  ☆82Updated 10 months ago
• RedTeamPentesting / adauth
  Active Directory Authentication Library
  ☆78Updated 2 weeks ago
• 1njected / CMLoot
  Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) SMB shares
  ☆176Updated 2 years ago
• sud0Ru / NauthNRPC
  Enumerate Domain Users Without Authentication
  ☆256Updated 3 months ago
• improsec / BackupOperatorToolkit
  The BackupOperatorToolkit contains different techniques allowing you to escalate from Backup Operator to Domain Admin
  ☆176Updated 2 years ago
• JPG0mez / ADCSync
  Use ESC1 to perform a makeshift DCSync and dump hashes
  ☆211Updated last year
• synacktiv / OUned
  The OUned project automating Active Directory Organizational Units ACL exploitation through gPLink poisoning
  ☆123Updated 4 months ago
• mandiant / ccmpwn
  ☆208Updated last year
• dadevel / mssql-spider
  Automated exploitation of MSSQL servers at scale
  ☆112Updated last week
• xpn / RandomTSScripts
  Collection of random RedTeam scripts.
  ☆207Updated last year
• rotarydrone / GlobalUnProtect
  Decrypt GlobalProtect configuration and cookie files.
  ☆150Updated 10 months ago
• synacktiv / SCCMSecrets
  SCCMSecrets.py aims at exploiting SCCM policies distribution for credentials harvesting, initial access and lateral movement.
  ☆229Updated 2 months ago
• sensepost / susinternals
  psexecsvc - a python implementation of PSExec's native service implementation
  ☆206Updated 5 months ago
• decoder-it / KrbRelay-SMBServer
  ☆220Updated 9 months ago
• trustedsec / specula
  ☆203Updated last month
• 3lp4tr0n / RemoteMonologue
  Weaponizing DCOM for NTLM Authentication Coercions
  ☆159Updated last month
• rtecCyberSec / BitlockMove
  Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking
  ☆297Updated last month
• Diverto / IPPrintC2
  PoC for using MS Windows printers for persistence / command and control via Internet Printing
  ☆147Updated last year
• t94j0 / adexplorersnapshot-rs
  ☆83Updated last year
• Leo4j / Invoke-SessionHunter
  Retrieve and display information about active user sessions on remote computers. No admin privileges required.
  ☆190Updated 11 months ago
• SpecterOps / cred1py
  A Python POC for CRED1 over SOCKS5
  ☆151Updated 10 months ago