A tool for exploiting Kerberos tickets against system with Credential Guard enabled.
☆26Sep 2, 2025Updated last year
Alternatives and similar repositories for Klist2
Users that are interested in Klist2 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- CVE-2025-59501 POC code☆26Nov 20, 2025Updated 11 months ago
- A web application to parse and analyse Snaffler & Group3r output providing filtering capabilities in a nice interactive interface.☆11Sep 16, 2026Updated last month
- Tool to authenticate to an LDAP/S server with a certificate through Schannel written in Rust. 🦀☆78Oct 10, 2026Updated last month
- Ask the Web Account Manager (WAM) for Entra ID tokens☆170Sep 11, 2026Updated 2 months ago
- POC Utilizing the new SleepMask-VS kit to utilize RC4 encryption.☆12Mar 4, 2025Updated last year
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Azure Blob Storage C2 Profile for Mythic☆30Sep 28, 2026Updated last month
- ☆25Sep 6, 2025Updated last year
- Runtime Credential Guard deactivation via \\LSA_ISO_DISABLE_CREDENTIAL_GUARD + LSASS NT hash extraction (Win11 24H2)☆110Oct 27, 2026Updated 2 weeks ago
- Random BOFs for LDAP tradecraft☆75Sep 9, 2025Updated last year
- Dump TGTs remotely and convert Windows' klist binary output to ccache.☆117Aug 6, 2026Updated 3 months ago
- ☆33Oct 22, 2026Updated 3 weeks ago
- ☆14Oct 1, 2025Updated last year
- a short script to make my life easy : ) nothing more☆13Jul 6, 2026Updated 4 months ago
- Async port/ping scanner BOF. Supports IP/port ranges, CIDR notation and hostnames.☆20Jul 23, 2026Updated 3 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Python and BOF utilites to the determine EPA enforcement levels of popular NTLM relay targets from the offensive perspective☆209Updated this week
- Busybox-style Beacon Object Files for *nix post-exploitation. Reimplements common Unix utilities as BOFs for use in stripped environments…☆84Aug 22, 2026Updated 2 months ago
- A stealthier approach to WMI-based command execution using Impacket without touching the disk.☆88Mar 15, 2026Updated 7 months ago
- One-header configurable C++20 COFF loader☆20Jul 21, 2025Updated last year
- Pure PowerShell port of PassTheCert tool to authenticate to an LDAP/S server with a certificate through Schannel☆66Apr 13, 2025Updated last year
- .NET CLR-Stomping☆150May 20, 2026Updated 5 months ago
- ☆42Updated this week
- A Beacon Object File suite for Microsoft SQL Server that speaks TDS 7.4 on the wire itself☆103Apr 9, 2026Updated 7 months ago
- BOF POC of the DSCourier project / invoking WinGet via COM☆90Apr 23, 2026Updated 6 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Printer exploitation framework for penetration testing. Discovers printers via PJL scanning, checks for default credentials, and extracts…☆24Oct 8, 2026Updated last month
- This repo contains the results of an internal re-write of impacket I undertook at my current company. It contains some of the IoCs found …☆361Sep 7, 2026Updated 2 months ago
- ☆46Jul 1, 2026Updated 4 months ago
- NØW is a word-based shellcode encoding and obfuscation tool that transforms raw shellcode bytes into natural-looking English prose.☆92Jun 24, 2026Updated 4 months ago
- A newer iteration of TitanLdr with some newer hooks, and design. A generic user defined reflective DLL I built to prove a point to Mudge …☆35Mar 20, 2023Updated 3 years ago
- Recover NT hashes from NetNTLMv1 responses using local WebGPU computation and local/remote table lookup☆151Oct 7, 2026Updated last month
- A Cobalt Strike Beacon Object File that exploits the BlueHammer vulnerability that to obtain a copy of the SAM database.☆167Apr 15, 2026Updated 6 months ago
- Cobalt Strike BOF☆58Dec 10, 2025Updated 11 months ago
- A python proof of concept tool to assist in your payloads classification against EDR/AV's machine learning models☆39Oct 14, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Extract PRT cookies remotely with InteractiveToken Scheduled Tasks☆15Aug 13, 2026Updated 3 months ago
- A Cobalt Strike 4.12+ User-Defined C2 (UDC2) implementation that tunnels all Beacon traffic through Microsoft Teams TURN relay infrastruc…☆20Nov 6, 2026Updated last week
- Mythic Peer to Peer (P2P) Communication Protocol via. LLDP☆25Aug 20, 2026Updated 2 months ago
- Beacon Object File (BOF) to coerce machine account auth via IPP.☆108Nov 4, 2026Updated last week
- Situational Awareness commands implemented using Beacon Object Files☆13Jul 22, 2026Updated 3 months ago
- Async BOF for NTLMv2 Hash Snooping from ETW☆13Apr 2, 2026Updated 7 months ago
- vbkview is a tool designed to browse and extract data from unencrypted Veeam backups.☆15Jul 20, 2026Updated 3 months ago
Are these results useful?