Alternatives and similar repositories for Privesc

Users that are interested in Privesc are comparing it to the libraries listed below

• gdedrouas / Exchange-AD-Privesc
  Exchange privilege escalations to Active Directory
  ☆778Updated 2 years ago
• fox-it / aclpwn.py
  Active Directory ACL exploitation with BloodHound
  ☆731Updated 3 years ago
• G0ldenGunSec / SharpSecDump
  .Net port of the remote SAM + LSA Secrets dumping functionality of impacket's secretsdump.py
  ☆610Updated 2 years ago
• dirkjanm / adidnsdump
  Active Directory Integrated DNS dumping by any authenticated user
  ☆1,034Updated 3 months ago
• dirkjanm / PrivExchange
  Exchange your privileges for Domain Admin privs by abusing Exchange
  ☆1,026Updated 5 years ago
• lgandx / Responder-Windows
  Responder Windows Version Beta
  ☆536Updated 11 months ago
• OmerYa / Invisi-Shell
  Hide your Powershell script in plain sight. Bypass all Powershell security features
  ☆1,194Updated 5 years ago
• CBHue / PyFuscation
  Obfuscate powershell scripts by replacing Function names, Variables and Parameters.
  ☆519Updated 2 years ago
• evilmog / ntlmv1-multi
  NTLMv1 Multitool
  ☆634Updated 2 months ago
• CiscoCXSecurity / linikatz
  linikatz is a tool to attack AD on UNIX
  ☆568Updated last year
• the-useless-one / pywerview
  A (partial) Python rewriting of PowerSploit's PowerView
  ☆1,019Updated 4 months ago
• Flangvik / NetLoader
  Loads any C# binary in mem, patching AMSI + ETW.
  ☆839Updated 3 years ago
• fox-it / Invoke-ACLPwn
  ☆523Updated 2 years ago
• Kevin-Robertson / Powermad
  PowerShell MachineAccountQuota and DNS exploit tools
  ☆1,355Updated 2 years ago
• Mr-Un1k0d3r / PowerLessShell
  Run PowerShell command without invoking powershell.exe
  ☆1,511Updated 2 years ago
• Sw4mpf0x / PowerLurk
  Malicious WMI Events using PowerShell
  ☆388Updated 8 years ago
• leoloobeek / LAPSToolkit
  Tool to audit and attack LAPS environments
  ☆881Updated 7 years ago
• Greenwolf / Spray
  A Password Spraying tool for Active Directory Credentials by Jacob Wilkin(Greenwolf)
  ☆747Updated last year
• decoder-it / psgetsystem
  getsystem via parent process using ps1 & embeded c#
  ☆423Updated last year
• GhostPack / SafetyKatz
  SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader
  ☆1,277Updated 5 years ago
• bitsadmin / nopowershell
  PowerShell rebuilt in C# for Red Teaming purposes
  ☆991Updated last week
• danielbohannon / Invoke-CradleCrafter
  PowerShell Remote Download Cradle Generator & Obfuscator
  ☆841Updated 7 years ago
• Kevin-Robertson / Invoke-TheHash
  PowerShell Pass The Hash Utils
  ☆1,617Updated 6 years ago
• TarlogicSecurity / kerbrute
  An script to perform kerberos bruteforcing by using impacket
  ☆451Updated 3 years ago
• tevora-threat / SharpView
  C# implementation of harmj0y's PowerView
  ☆1,045Updated last year
• AdrianVollmer / PowerHub
  A post exploitation tool based on a web application, focusing on bypassing endpoint protection and application whitelisting
  ☆813Updated 3 months ago
• Plazmaz / LNKUp
  Generates malicious LNK file payloads for data exfiltration
  ☆410Updated 7 years ago
• leechristensen / SpoolSample
  PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN RPC interface. This is possible via other protocols as w…
  ☆1,019Updated last year
• eladshamir / Internal-Monologue
  Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS
  ☆1,555Updated 6 years ago
• NotMedic / NetNTLMtoSilverTicket
  SpoolSample -> Responder w/NetNTLM Downgrade -> NetNTLMv1 -> NTLM -> Kerberos Silver Ticket
  ☆878Updated 3 years ago