Alternatives and similar repositories for ADExplorerX:

Users that are interested in ADExplorerX are comparing it to the libraries listed below

• Jumbo-WJB / SharpAllowedToAct-Modify
  resource-based constrained delegation RBCD
  ☆43Updated 3 years ago
• XiaoliChan / Invoke-sAMSpoofing
  CVE-2021-42287/CVE-2021-42278 exploits in powershell
  ☆37Updated 2 years ago
• JDArmy / Lsass-Shtinkering
  dump lsass tool
  ☆39Updated 2 years ago
• XiaoliChan / PetitPotam-V2
  More EFS coerced authentication method with PetitPotam.py
  ☆22Updated last year
• Ridter / netsync
  Use the Netlogon Remote Protocol (MS-NRPC) to dump the target hash.
  ☆21Updated 9 months ago
• ASkyeye / AB
  Cs-Sleep-Mask-Fiber
  ☆17Updated 4 months ago
• dust-life / Free445-BOF
  ☆21Updated last year
• sairson / WebGuard
  WebGuard是根据 风起师傅的RedGuard 和 mgeeky师傅的RedWarden结合出来的http请求过滤器go包，亦在帮助采用go编写C2 http监听器做流量过滤和规则匹配
  ☆31Updated 2 years ago
• timwhitez / Doge-DumpMem
  dump lsass
  ☆37Updated 2 years ago
• Jumbo-WJB / SharpSniper-Modify
  query specific user and login IP from remote machine
  ☆17Updated 2 years ago
• aleenzz / SCExec
  ☆30Updated last year
• XiaoliChan / LDAPShell
  A wrapper of ldap_shell.py module which in ntlmrelayx
  ☆62Updated 2 years ago
• RowTeam / SharpNBTScan
  ☆22Updated 2 years ago
• XiaoliChan / CrackMapExec-Extension
  CrackMapExec extension module/protocol support
  ☆42Updated last year
• JDArmy / NO445-lateral-movement
  command execute without 445 port
  ☆52Updated 2 years ago
• timwhitez / Doge-ScreenShot
  desktop screenshot
  ☆29Updated last year
• Ridter / MSSQL_CLR
  MSSQL CLR for pentest.
  ☆54Updated last year
• Hagrid29 / BOF-DCOMPotato-PrintNotify
  Cobalt Strike Beacon Object File (BOF) that obtain SYSTEM privilege with SeImpersonate privilege by passing a malicious IUnknwon object t…
  ☆38Updated last year
• timwhitez / ScareCrow-Common
  ScareCrow loader binary source which easier to read and learn
  ☆25Updated 2 years ago
• FeigongSec / NTLMINFO
  ☆45Updated 3 years ago
• ASkyeye / Artillery
  CIA UAC bypass implementation that utilizes elevated COM object to write to System32 and an auto-elevated process to execute as administr…
  ☆14Updated last year
• timwhitez / memmod
  Fork & modify of Wireguard's Memmod
  ☆31Updated last year
• Rvn0xsy / impacket-suite
  Post-exploitation script developed using impacket
  ☆21Updated 2 years ago
• XiaoliChan / WinRpcTest
  利用RPC服务，内网批量探测Windows出网
  ☆14Updated 2 years ago
• timwhitez / CLR-RWX
  Load CLR to get RWX 通过加载clr在自身内存中产生rwx空间
  ☆22Updated 2 years ago
• latortuga71 / GoPsExec
  Basic Psexec clone, but in golang.
  ☆14Updated 2 years ago
• woodpecker-appstore / EchoToFileConverter
  Windows & linux Echo to file command converter
  ☆23Updated 3 years ago
• kyxiaxiang / CrackSleeve4.9
  ☆39Updated last year
• m1ddl3w4r3 / ExecRemoteNET
  Execute Remote Assembly with args passing and with AMSI and ETW patching .
  ☆32Updated last year
• MortalAndTry / ProxyRelay
  Exchange ProxyRelay POC
  ☆37Updated 2 years ago