Alternatives and similar repositories for PrivExchange:

Users that are interested in PrivExchange are comparing it to the libraries listed below

• fox-it / aclpwn.py
  Active Directory ACL exploitation with BloodHound
  ☆721Updated 3 years ago
• fox-it / Invoke-ACLPwn
  ☆520Updated 2 years ago
• gdedrouas / Exchange-AD-Privesc
  Exchange privilege escalations to Active Directory
  ☆759Updated 2 years ago
• ropnop / impacket_static_binaries
  Standalone binaries for Linux/Windows of Impacket's examples
  ☆728Updated last year
• Kevin-Robertson / Powermad
  PowerShell MachineAccountQuota and DNS exploit tools
  ☆1,299Updated 2 years ago
• leechristensen / SpoolSample
  PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN RPC interface. This is possible via other protocols as w…
  ☆994Updated 10 months ago
• evilmog / ntlmv1-multi
  NTLMv1 Multitool
  ☆612Updated this week
• dirkjanm / adidnsdump
  Active Directory Integrated DNS dumping by any authenticated user
  ☆998Updated 3 weeks ago
• GhostPack / SafetyKatz
  SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader
  ☆1,256Updated 5 years ago
• the-useless-one / pywerview
  A (partial) Python rewriting of PowerSploit's PowerView
  ☆974Updated last month
• dirkjanm / krbrelayx
  Kerberos unconstrained delegation abuse toolkit
  ☆1,278Updated 2 months ago
• tevora-threat / SharpView
  C# implementation of harmj0y's PowerView
  ☆1,031Updated last year
• NotMedic / NetNTLMtoSilverTicket
  SpoolSample -> Responder w/NetNTLM Downgrade -> NetNTLMv1 -> NTLM -> Kerberos Silver Ticket
  ☆842Updated 3 years ago
• breenmachine / RottenPotatoNG
  New version of RottenPotato as a C++ DLL and standalone C++ binary - no need for meterpreter or other tools.
  ☆935Updated 7 years ago
• Mr-Un1k0d3r / SCShell
  Fileless lateral movement tool that relies on ChangeServiceConfigA to run command
  ☆1,484Updated last year
• leoloobeek / LAPSToolkit
  Tool to audit and attack LAPS environments
  ☆859Updated 7 years ago
• CiscoCXSecurity / linikatz
  linikatz is a tool to attack AD on UNIX
  ☆552Updated last year
• tothi / rbcd-attack
  Kerberos Resource-Based Constrained Delegation Attack from Outside using Impacket
  ☆530Updated 2 years ago
• VoidSec / CVE-2020-1472
  Exploit Code for CVE-2020-1472 aka Zerologon
  ☆383Updated 4 years ago
• decoder-it / psgetsystem
  getsystem via parent process using ps1 & embeded c#
  ☆406Updated last year
• Kevin-Robertson / Invoke-TheHash
  PowerShell Pass The Hash Utils
  ☆1,567Updated 6 years ago
• fullmetalcache / PowerLine
  ☆307Updated 6 years ago
• CBHue / PyFuscation
  Obfuscate powershell scripts by replacing Function names, Variables and Parameters.
  ☆517Updated 2 years ago
• BloodHoundAD / SharpHound3
  C# Data Collector for the BloodHound Project, Version 3
  ☆535Updated 2 years ago
• hausec / Bloodhound-Custom-Queries
  Custom Query list for the Bloodhound GUI based off my cheatsheet
  ☆773Updated 2 years ago
• bluscreenofjeff / Malleable-C2-Randomizer
  A script to randomize Cobalt Strike Malleable C2 profiles and reduce the chances of flagging signature-based detection controls
  ☆443Updated 2 years ago
• danielbohannon / Invoke-CradleCrafter
  PowerShell Remote Download Cradle Generator & Obfuscator
  ☆834Updated 7 years ago
• FSecureLABS / SharpGPOAbuse
  SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GP…
  ☆1,162Updated 4 years ago
• bluscreenofjeff / AggressorScripts
  Aggressor scripts for use with Cobalt Strike 3.0+
  ☆839Updated 2 years ago
• threatexpress / cs2modrewrite
  Convert Cobalt Strike profiles to modrewrite scripts
  ☆600Updated 2 years ago