Alternatives and similar repositories for Exchange-AD-Privesc:

Users that are interested in Exchange-AD-Privesc are comparing it to the libraries listed below

• leoloobeek / LAPSToolkit
  Tool to audit and attack LAPS environments
  ☆837Updated 6 years ago
• fox-it / aclpwn.py
  Active Directory ACL exploitation with BloodHound
  ☆710Updated 3 years ago
• fox-it / Invoke-ACLPwn
  ☆515Updated 2 years ago
• Kevin-Robertson / Powermad
  PowerShell MachineAccountQuota and DNS exploit tools
  ☆1,271Updated 2 years ago
• leechristensen / SpoolSample
  PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN RPC interface. This is possible via other protocols as w…
  ☆954Updated 8 months ago
• dirkjanm / PrivExchange
  Exchange your privileges for Domain Admin privs by abusing Exchange
  ☆994Updated 5 years ago
• Sw4mpf0x / PowerLurk
  Malicious WMI Events using PowerShell
  ☆376Updated 8 years ago
• the-useless-one / pywerview
  A (partial) Python rewriting of PowerSploit's PowerView
  ☆947Updated last month
• danielbohannon / Invoke-CradleCrafter
  PowerShell Remote Download Cradle Generator & Obfuscator
  ☆824Updated 6 years ago
• tevora-threat / SharpView
  C# implementation of harmj0y's PowerView
  ☆1,021Updated 10 months ago
• FSecureLABS / SharpGPOAbuse
  SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GP…
  ☆1,101Updated 4 years ago
• NotMedic / NetNTLMtoSilverTicket
  SpoolSample -> Responder w/NetNTLM Downgrade -> NetNTLMv1 -> NTLM -> Kerberos Silver Ticket
  ☆803Updated 3 years ago
• decoder-it / psgetsystem
  getsystem via parent process using ps1 & embeded c#
  ☆392Updated last year
• dirkjanm / adconnectdump
  Dump Azure AD Connect credentials for Azure AD and Active Directory
  ☆650Updated 2 months ago
• samratashok / ADModule
  Microsoft signed ActiveDirectory PowerShell module
  ☆868Updated 5 years ago
• dirkjanm / adidnsdump
  Active Directory Integrated DNS dumping by any authenticated user
  ☆959Updated 2 months ago
• hausec / Bloodhound-Custom-Queries
  Custom Query list for the Bloodhound GUI based off my cheatsheet
  ☆762Updated 2 years ago
• evilmog / ntlmv1-multi
  NTLMv1 Multitool
  ☆599Updated 3 months ago
• GhostPack / SafetyKatz
  SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader
  ☆1,240Updated 5 years ago
• OmerYa / Invisi-Shell
  Hide your Powershell script in plain sight. Bypass all Powershell security features
  ☆1,129Updated 5 years ago
• l0ss / Grouper2
  Find vulnerabilities in AD Group Policy
  ☆643Updated 2 years ago
• Kevin-Robertson / Invoke-TheHash
  PowerShell Pass The Hash Utils
  ☆1,533Updated 6 years ago
• dirkjanm / krbrelayx
  Kerberos unconstrained delegation abuse toolkit
  ☆1,223Updated this week
• lgandx / Responder-Windows
  Responder Windows Version Beta
  ☆509Updated 6 months ago
• CBHue / PyFuscation
  Obfuscate powershell scripts by replacing Function names, Variables and Parameters.
  ☆512Updated 2 years ago
• GhostPack / SharpUp
  SharpUp is a C# port of various PowerUp functionality.
  ☆1,303Updated 11 months ago
• padovah4ck / PSByPassCLM
  Bypass for PowerShell Constrained Language Mode
  ☆382Updated 3 years ago
• eladshamir / Internal-Monologue
  Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS
  ☆1,466Updated 6 years ago
• ropnop / impacket_static_binaries
  Standalone binaries for Linux/Windows of Impacket's examples
  ☆724Updated last year
• BloodHoundAD / SharpHound2
  The Old BloodHound C# Ingestor (Deprecated)
  ☆510Updated 2 years ago