Utilities for Pentesting with BloodHound
☆22Oct 14, 2026Updated 2 weeks ago
Alternatives and similar repositories for bloodhoundcli
Users that are interested in bloodhoundcli are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Extract registry and NTDS secrets from local or remote disk images☆46Mar 15, 2025Updated last year
- Pentesting tools packaged for Arch Linux.☆20Oct 20, 2026Updated last week
- Collection of Reverse, Bind & Web Shells☆15Mar 25, 2026Updated 7 months ago
- Password Transformation Tool (ptt) is a versatile utility designed for password cracking.☆12Oct 21, 2026Updated last week
- SpecterOps Historical Records☆16Oct 21, 2026Updated last week
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- GPOAnalyzer is a tool designed to assist in parsing domain Group Policy Object (GPO) files located in the SYSVOL directory.☆28Jun 14, 2024Updated 2 years ago
- An easy way to convert BloodHound output files into data that can be imported into reporting software like Dradis and Plextrac. Built by …☆20Oct 15, 2020Updated 6 years ago
- Automatically run and populate a new instance of BH CE☆134Jan 30, 2026Updated 9 months ago
- Asynchronous NFSv3 client in pure Python☆31Jul 16, 2025Updated last year
- Assorted BloodHound Cypher queries/tricks I haven't seen in other cheat sheets☆12Jun 21, 2021Updated 5 years ago
- scripts and other various binaries that afford the pentester EDR bypass resources☆22Aug 2, 2026Updated 2 months ago
- Grab NetNTLMv2 hashes using ETW with administrative rights on Windows 8.1 / Windows Server 2016 and later☆127May 9, 2023Updated 3 years ago
- Parses cached certificate templates from a Windows Registry file and displays them in the same style as Certipy does☆98Jul 3, 2025Updated last year
- The command prompt has been disabled by your administrator☆42May 18, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Shellcode execution via x86 inline assembly based on MSVC syntax☆16Apr 26, 2023Updated 3 years ago
- Exploit AD CS misconfiguration allowing privilege escalation and persistence from any child domain to full forest compromise☆136Dec 2, 2023Updated 2 years ago
- Semgrep rules to identify GWT attack surface☆12Apr 28, 2022Updated 4 years ago
- Bunch of BOF files☆46Jun 30, 2025Updated last year
- Code and data for our paper "Onelogon: Taking over Active Directory Accounts via Netlogon" (WOOT’26).☆128Sep 1, 2026Updated last month
- Identify Azure AD resources that issue tokens without MFA enforcement using the ROPC grant flow.☆90Feb 2, 2026Updated 8 months ago
- Basic network port scanner created in C#☆19Aug 1, 2019Updated 7 years ago
- Automating the MITM attack on WSUS☆414Oct 18, 2026Updated last week
- Beacon Object File implementation of Yaxser's Backstab☆15Mar 9, 2022Updated 4 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- .NET Post-Exploitation Utility for Abusing Strong Explicit Certificate Mappings in ADCS☆160Feb 10, 2025Updated last year
- SOAPy is a Proof of Concept (PoC) tool for conducting offensive interaction with Active Directory Web Services (ADWS) through a SOCKS5 pr…☆215Aug 13, 2026Updated 2 months ago
- Fully asynchronous SMB library written in pure python☆221Aug 16, 2026Updated 2 months ago
- runs sliver command on all hosts, partially based on example in sliver repo☆12Mar 23, 2024Updated 2 years ago
- SuperSharpShares is a tool designed to automate enumerating domain shares, allowing for quick verification of accessible shares by your a…☆75May 3, 2024Updated 2 years ago
- a strictly RFC 4510 conforming LDAP V3 pure Python client. The same codebase works with Python 2. Python 3, PyPy and PyPy3☆10Apr 19, 2025Updated last year
- ☆66Mar 15, 2024Updated 2 years ago
- Enumerate Domain Users Without Authentication☆312Apr 22, 2025Updated last year
- ☆86Mar 11, 2026Updated 7 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Active Directory Authentication Library☆99Oct 2, 2026Updated 3 weeks ago
- Active Directory Certificate Services (ADCS) enumeration library with BloodHound CE v6 export support☆93Jul 27, 2026Updated 3 months ago
- Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel☆426Updated this week
- Python tool to interact with WMI StdRegProv☆61Nov 19, 2024Updated last year
- Purple Team Dropper generator using open source templates.☆18May 23, 2024Updated 2 years ago
- Add Shadow Credentials to a target object by editing their msDS-KeyCredentialLink attribute☆25Jun 5, 2024Updated 2 years ago
- Beautify Nessus scan output☆12Dec 2, 2023Updated 2 years ago