CLI tool to interact with the BloodHound CE API
☆69Mar 6, 2026Updated 2 weeks ago
Alternatives and similar repositories for bhcli
Users that are interested in bhcli are comparing it to the libraries listed below
Sorting:
- Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel☆371Jan 29, 2026Updated last month
- DPAPI looting remotely and locally in Python☆542Updated this week
- ☆15Jun 27, 2024Updated last year
- SOAPy is a Proof of Concept (PoC) tool for conducting offensive interaction with Active Directory Web Services (ADWS) from Linux hosts.☆166Jan 23, 2026Updated last month
- Tool for Active Directory Certificate Services enumeration and abuse☆166Apr 17, 2025Updated 11 months ago
- Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel☆390Feb 23, 2024Updated 2 years ago
- Get Fine Grained Password Policy☆78Updated this week
- Command Augmentation support for BOFs and .NET assemblies across agents☆42Mar 12, 2026Updated last week
- rust port of pspy with support for process monitoring over dbus☆36Jan 4, 2026Updated 2 months ago
- BOF implementation of Adopt. Spawns a process from a process. Can sometimes be used to run a session > 0 process from session 0.☆17Jul 22, 2022Updated 3 years ago
- ☆139Nov 17, 2025Updated 4 months ago
- Multithreaded C# .NET Assembly to enumerate accessible network shares in a domain☆34Nov 13, 2023Updated 2 years ago
- Enable or Disable TokenPrivilege(s)☆15May 17, 2024Updated last year
- Offensive GPO dumping and analysis tool that leverages and enriches BloodHound data☆360Jan 8, 2026Updated 2 months ago
- Parses logs created by Cobalt Strike or Brute Ratel and creates an SQLite DB which can be used to create custom reports.☆24Jan 15, 2026Updated 2 months ago
- Python version of the C# tool for "Shadow Credentials" attacks☆864Feb 14, 2026Updated last month
- Request device ticket/token using the device's MSA☆38Aug 25, 2025Updated 6 months ago
- A tool leveraging Kerberos tickets to get Microsoft 365 access tokens using Seamless SSO☆238Aug 25, 2024Updated last year
- PowerShell collector for adding MSSQL attack paths to BloodHound with OpenGraph☆293Updated this week
- Determine if the WebClient Service (WebDAV) is running on a remote system☆143Mar 9, 2024Updated 2 years ago
- A community-driven collection of BloodHound queries☆173Feb 17, 2026Updated last month
- Tool to aid in dumping LSASS process remotely☆42Sep 23, 2025Updated 5 months ago
- ☆48Dec 5, 2025Updated 3 months ago
- Proof-of-Concept tool to authenticate to an LDAP/S server with a certificate through Schannel☆733Sep 3, 2025Updated 6 months ago
- A Python POC for CRED1 over SOCKS5☆165Oct 5, 2024Updated last year
- Weaponizing DCOM for NTLM Authentication Coercions☆274Jul 1, 2025Updated 8 months ago
- Python3 rewrite of AsOutsider features of AADInternals☆59Jul 23, 2025Updated 7 months ago
- Active Directory data ingestor for BloodHound Community Edition written in Rust. 🦀☆470Jan 15, 2026Updated 2 months ago
- Shellcode loader written in C and Assembly utilizing direct or indirect syscalls to evade UM EDR hooks☆139Dec 22, 2024Updated last year
- BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions☆346Nov 19, 2024Updated last year
- .NET/PowerShell/VBA Offensive Security Obfuscator☆196May 4, 2024Updated last year
- A BloodHound collector for Microsoft Configuration Manager☆393Jul 7, 2025Updated 8 months ago
- Tool for issuing manual LDAP queries which offers bofhound compatible output☆57Jun 2, 2024Updated last year
- Entra ID Password Protection Banned Password Lists☆18Apr 16, 2024Updated last year
- In-depth ldap enumeration utility☆566Mar 4, 2026Updated 2 weeks ago
- The GPOddity project, aiming at automating GPO attack vectors through NTLM relaying (and more).☆361Dec 13, 2025Updated 3 months ago
- MaLDAPtive is a framework for LDAP SearchFilter parsing, obfuscation, deobfuscation and detection.☆337Aug 7, 2024Updated last year
- Test AMSI Provider implementation in C#☆42Dec 18, 2024Updated last year
- Partial python implementation of SharpGPOAbuse☆531Mar 7, 2026Updated last week