Alternatives and similar repositories for CVE-2023-24055_PoC

Users that are interested in CVE-2023-24055_PoC are comparing it to the libraries listed below

• testanull / ProxyNotShell-PoC
  ☆409Updated 2 years ago
• Dec0ne / ShadowSpray
  A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other ob…
  ☆468Updated 2 years ago
• senzee1984 / Amsi_Bypass_In_2023
  Amsi Bypass payload that works on Windwos 11
  ☆378Updated last year
• nettitude / SharpWSUS
  ☆456Updated 2 years ago
• r4wd3r / Suborner
  ☆469Updated 7 months ago
• paranoidninja / Brute-Ratel-C4-Community-Kit
  This repository contains scripts, configurations and deprecated payload loaders for Brute Ratel C4 (https://bruteratel.com/)
  ☆273Updated 10 months ago
• zblurx / certsync
  Dump NTDS with golden certificates and UnPAC the hash
  ☆635Updated last year
• p0dalirius / pyFindUncommonShares
  FindUncommonShares is a Python script allowing to quickly find uncommon shares in vast Windows Domains, and filter by READ or WRITE acces…
  ☆418Updated 4 months ago
• wh0amitz / S4UTomato
  Escalate Service Account To LocalSystem via Kerberos
  ☆395Updated last year
• wsummerhill / C2_RedTeam_CheatSheets
  Useful C2 techniques and cheatsheets learned from engagements
  ☆515Updated 2 months ago
• kraken-ng / Kraken
  Kraken, a modular multi-language webshell coded by @secu_x11
  ☆544Updated last year
• xforcered / SQLRecon
  A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.
  ☆401Updated 5 months ago
• Idov31 / MrKaplan
  MrKaplan is a tool aimed to help red teamers to stay hidden by clearing evidence of execution.
  ☆260Updated last year
• ricardojoserf / WhoamiAlternatives
  Different methods to get current username without using whoami
  ☆177Updated last year
• BC-SECURITY / Moriarty
  Moriarty is designed to enumerate missing KBs, detect various vulnerabilities, and suggest potential exploits for Privilege Escalation in…
  ☆514Updated 10 months ago
• ly4k / PrintNightmare
  Python implementation for PrintNightmare (CVE-2021-1675 / CVE-2021-34527)
  ☆186Updated 3 years ago
• ACE-Responder / RogueSliver
  A suite of tools to disrupt campaigns using the Sliver C2 framework.
  ☆276Updated last year
• cepxeo / dll4shell
  Shellcode launcher for AV bypass
  ☆215Updated last year
• ZeroMemoryEx / C2-Hunter
  Extract C2 Traffic
  ☆249Updated 7 months ago
• synacktiv / GPOddity
  The GPOddity project, aiming at automating GPO attack vectors through NTLM relaying (and more).
  ☆310Updated 7 months ago
• Synzack / ldapper
  ☆234Updated 7 months ago
• MzHmO / LeakedWallpaper
  Leak of any user's NetNTLM hash. Fixed in KB5040434
  ☆255Updated 10 months ago
• dievus / msLDAPDump
  LDAP enumeration tool implemented in Python3
  ☆226Updated last month
• Z4kSec / Masky
  Python library with CLI allowing to remotely dump domain user credentials via an ADCS without dumping the LSASS process memory
  ☆392Updated last year
• post-cyberlabs / Offensive_tools
  ☆409Updated last year
• Dec0ne / DavRelayUp
  DavRelayUp - a universal no-fix local privilege escalation in domain-joined windows workstations where LDAP signing is not enforced (the …
  ☆551Updated 2 years ago
• pwn1sher / WMEye
  WMEye is a post exploitation tool that uses WMI Event Filter and MSBuild Execution for lateral movement
  ☆368Updated 3 years ago
• iomoath / PowerShx
  Run Powershell without software restrictions.
  ☆285Updated 3 years ago
• ly4k / Pachine
  Python implementation for CVE-2021-42278 (Active Directory Privilege Escalation)
  ☆278Updated 3 years ago
• m0n1x90 / ADReaper
  A fast enumeration tool for Windows Active Directory Pentesting written in Go
  ☆280Updated 2 years ago