Alternatives and similar repositories for Exchange-AD-Privesc:

Users that are interested in Exchange-AD-Privesc are comparing it to the libraries listed below

• Kevin-Robertson / Powermad
  PowerShell MachineAccountQuota and DNS exploit tools
  ☆1,304Updated 2 years ago
• fox-it / aclpwn.py
  Active Directory ACL exploitation with BloodHound
  ☆723Updated 3 years ago
• leoloobeek / LAPSToolkit
  Tool to audit and attack LAPS environments
  ☆860Updated 7 years ago
• fox-it / Invoke-ACLPwn
  ☆520Updated 2 years ago
• dirkjanm / PrivExchange
  Exchange your privileges for Domain Admin privs by abusing Exchange
  ☆1,011Updated 5 years ago
• leechristensen / SpoolSample
  PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN RPC interface. This is possible via other protocols as w…
  ☆996Updated 10 months ago
• the-useless-one / pywerview
  A (partial) Python rewriting of PowerSploit's PowerView
  ☆974Updated last month
• NotMedic / NetNTLMtoSilverTicket
  SpoolSample -> Responder w/NetNTLM Downgrade -> NetNTLMv1 -> NTLM -> Kerberos Silver Ticket
  ☆842Updated 3 years ago
• hausec / Bloodhound-Custom-Queries
  Custom Query list for the Bloodhound GUI based off my cheatsheet
  ☆773Updated 2 years ago
• evilmog / ntlmv1-multi
  NTLMv1 Multitool
  ☆612Updated last week
• decoder-it / psgetsystem
  getsystem via parent process using ps1 & embeded c#
  ☆406Updated last year
• GhostPack / SafetyKatz
  SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader
  ☆1,256Updated 5 years ago
• samratashok / ADModule
  Microsoft signed ActiveDirectory PowerShell module
  ☆895Updated 5 years ago
• Sw4mpf0x / PowerLurk
  Malicious WMI Events using PowerShell
  ☆384Updated 8 years ago
• dirkjanm / adidnsdump
  Active Directory Integrated DNS dumping by any authenticated user
  ☆998Updated 3 weeks ago
• tevora-threat / SharpView
  C# implementation of harmj0y's PowerView
  ☆1,031Updated last year
• FSecureLABS / SharpGPOAbuse
  SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GP…
  ☆1,162Updated 4 years ago
• dirkjanm / adconnectdump
  Dump Azure AD Connect credentials for Azure AD and Active Directory
  ☆668Updated 5 months ago
• danielbohannon / Invoke-CradleCrafter
  PowerShell Remote Download Cradle Generator & Obfuscator
  ☆834Updated 7 years ago
• Kevin-Robertson / Invoke-TheHash
  PowerShell Pass The Hash Utils
  ☆1,567Updated 6 years ago
• Mr-Un1k0d3r / RedTeamPowershellScripts
  Various PowerShell scripts that may be useful during red team exercise
  ☆944Updated 2 years ago
• padovah4ck / PSByPassCLM
  Bypass for PowerShell Constrained Language Mode
  ☆389Updated 3 years ago
• eladshamir / Internal-Monologue
  Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS
  ☆1,514Updated 6 years ago
• dev-2null / ADCollector
  A lightweight tool to quickly extract valuable information from the Active Directory environment for both attacking and defending.
  ☆629Updated 2 years ago
• dirkjanm / krbrelayx
  Kerberos unconstrained delegation abuse toolkit
  ☆1,278Updated 2 months ago
• CBHue / PyFuscation
  Obfuscate powershell scripts by replacing Function names, Variables and Parameters.
  ☆517Updated 2 years ago
• Mr-Un1k0d3r / SCShell
  Fileless lateral movement tool that relies on ChangeServiceConfigA to run command
  ☆1,484Updated last year
• cyberark / RiskySPN
  Detect and abuse risky SPNs
  ☆262Updated 7 years ago
• BloodHoundAD / SharpHound3
  C# Data Collector for the BloodHound Project, Version 3
  ☆535Updated 2 years ago
• lgandx / Responder-Windows
  Responder Windows Version Beta
  ☆523Updated 8 months ago