Alternatives and similar repositories for PrivExchange:

Users that are interested in PrivExchange are comparing it to the libraries listed below

• gdedrouas / Exchange-AD-Privesc
  Exchange privilege escalations to Active Directory
  ☆758Updated last year
• fox-it / aclpwn.py
  Active Directory ACL exploitation with BloodHound
  ☆718Updated 3 years ago
• Kevin-Robertson / Powermad
  PowerShell MachineAccountQuota and DNS exploit tools
  ☆1,288Updated 2 years ago
• leechristensen / SpoolSample
  PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN RPC interface. This is possible via other protocols as w…
  ☆977Updated 10 months ago
• fox-it / Invoke-ACLPwn
  ☆518Updated 2 years ago
• evilmog / ntlmv1-multi
  NTLMv1 Multitool
  ☆612Updated 3 weeks ago
• dirkjanm / adidnsdump
  Active Directory Integrated DNS dumping by any authenticated user
  ☆989Updated 4 months ago
• ropnop / impacket_static_binaries
  Standalone binaries for Linux/Windows of Impacket's examples
  ☆726Updated last year
• breenmachine / RottenPotatoNG
  New version of RottenPotato as a C++ DLL and standalone C++ binary - no need for meterpreter or other tools.
  ☆932Updated 7 years ago
• the-useless-one / pywerview
  A (partial) Python rewriting of PowerSploit's PowerView
  ☆965Updated 2 weeks ago
• tevora-threat / SharpView
  C# implementation of harmj0y's PowerView
  ☆1,026Updated last year
• decoder-it / psgetsystem
  getsystem via parent process using ps1 & embeded c#
  ☆401Updated last year
• bluscreenofjeff / AggressorScripts
  Aggressor scripts for use with Cobalt Strike 3.0+
  ☆831Updated 2 years ago
• GhostPack / SafetyKatz
  SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader
  ☆1,253Updated 5 years ago
• NotMedic / NetNTLMtoSilverTicket
  SpoolSample -> Responder w/NetNTLM Downgrade -> NetNTLMv1 -> NTLM -> Kerberos Silver Ticket
  ☆836Updated 3 years ago
• lukebaggett / dnscat2-powershell
  A Powershell client for dnscat2, an encrypted DNS command and control tool.
  ☆403Updated last year
• leoloobeek / LAPSToolkit
  Tool to audit and attack LAPS environments
  ☆855Updated 7 years ago
• danielbohannon / Invoke-CradleCrafter
  PowerShell Remote Download Cradle Generator & Obfuscator
  ☆833Updated 7 years ago
• CBHue / PyFuscation
  Obfuscate powershell scripts by replacing Function names, Variables and Parameters.
  ☆516Updated 2 years ago
• dirkjanm / krbrelayx
  Kerberos unconstrained delegation abuse toolkit
  ☆1,268Updated 2 months ago
• Flangvik / BetterSafetyKatz
  Fork of SafetyKatz that dynamically fetches the latest pre-compiled release of Mimikatz directly from gentilkiwi GitHub repo, runtime pat…
  ☆857Updated 4 years ago
• p3nt4 / Invoke-SocksProxy
  Socks proxy, and reverse socks server using powershell.
  ☆785Updated 4 years ago
• Mr-Un1k0d3r / SCShell
  Fileless lateral movement tool that relies on ChangeServiceConfigA to run command
  ☆1,476Updated last year
• Kevin-Robertson / Invoke-TheHash
  PowerShell Pass The Hash Utils
  ☆1,558Updated 6 years ago
• fullmetalcache / PowerLine
  ☆307Updated 6 years ago
• FSecureLABS / SharpGPOAbuse
  SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GP…
  ☆1,151Updated 4 years ago
• GhostPack / SharpDump
  SharpDump is a C# port of PowerSploit's Out-Minidump.ps1 functionality.
  ☆666Updated 6 years ago
• Sw4mpf0x / PowerLurk
  Malicious WMI Events using PowerShell
  ☆382Updated 8 years ago
• bluscreenofjeff / Malleable-C2-Randomizer
  A script to randomize Cobalt Strike Malleable C2 profiles and reduce the chances of flagging signature-based detection controls
  ☆439Updated 2 years ago
• threatexpress / cs2modrewrite
  Convert Cobalt Strike profiles to modrewrite scripts
  ☆594Updated 2 years ago