Nuclei-like credential surface scanner with BloodHound support. Audits local hosts for exposed secrets, cloud tokens, DevOps, and AI keys.
☆85Jul 21, 2026Updated 3 months ago
Alternatives and similar repositories for credshound
Users that are interested in credshound are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Living Off the Land Credentials. Public credential defaults, locations, and exposure patterns for real products, SaaS/cloud services, app…☆64Jul 19, 2026Updated 3 months ago
- 🥱😴🛌💤☆21Jun 21, 2026Updated 4 months ago
- A modern Python-based Red Team Operations Workbench for managing engagements, intelligence, evidence, and reporting.☆16Aug 26, 2026Updated 2 months ago
- ANIMO Azure Network Intel & Mission Ops a C2 based on Azure/Entra assessments☆94Sep 16, 2026Updated last month
- Deception LLM Guardrail that deceives perceived adversarial queries instead of refusing them.☆14Apr 15, 2026Updated 6 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Crystal port of GodPotato to abuse SeImpersonatePrivilege with indirect syscalls, dynamic API resolution and compile-time string obfuscat…☆128Aug 22, 2026Updated 2 months ago
- NebulaPulsar is a proof-of-concept in-memory implant framework for Java (JSP) and ASP.NET (ASPX/ASHX/ASMX) webshells, originally develope…☆47Jul 1, 2026Updated 3 months ago
- GhostHound is a BloodHound OpenGraph extension that surfaces Active Directory tombstone reanimation as a first-class attack path, enumera…☆47Aug 9, 2026Updated 2 months ago
- ☆22Jun 28, 2026Updated 4 months ago
- A litterbox integration for the Mythic Command and Control Server☆21Sep 14, 2026Updated last month
- Ditto is a Windows Mythic Agent for Chroimium Browsers that utilizes Chromium extensions as its base agent with optional sidecar attachme…☆33Oct 15, 2026Updated 2 weeks ago
- A Windows tool that converts LDIF files to BloodHound CE☆34Dec 20, 2025Updated 10 months ago
- Gradually raise the temp of emails/domains!☆14Jul 10, 2026Updated 3 months ago
- Pass-the-Passkey Family of Attacks☆233Sep 14, 2026Updated last month
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Chrome MV3 parameter/endpoint/secret harvester for authorized web security testing (GAP-style + Next.js RSC path maps)☆12Sep 9, 2026Updated last month
- Browse, search and audit AD Explorer snapshots offline in your browser: decoded attributes, LDAP filters, and reports for what BloodHound…☆41Sep 12, 2026Updated last month
- Local privilege-escalation proof of concept for the Windows WalletService vulnerability fixed in July 2026.☆61Jul 20, 2026Updated 3 months ago
- POC tool for ResetNightmare (CVE-2026-27912)☆223Aug 20, 2026Updated 2 months ago
- A Mythic C2 Profile that uses AWS S3 for command and control communication with per-execution credential isolation.☆15Mar 14, 2026Updated 7 months ago
- ☆37Sep 6, 2026Updated last month
- A modern alternative Web-UI for the Mythic Command and Control Server☆83Jul 3, 2026Updated 3 months ago
- Active Directory information dumper via ADWS for evasion purposes.☆324Oct 12, 2026Updated 2 weeks ago
- PowerShell implementation for AD CS☆163Jul 30, 2026Updated 3 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Attack path mapping for Active Directory, ADCS, SCCM, and MSSQL using BloodHound CE + OpenGraph data.☆246Aug 9, 2026Updated 2 months ago
- ☆50Aug 17, 2026Updated 2 months ago
- ☆91Sep 3, 2026Updated last month
- A Bloodhound alternative. BloodBash will ingest the same files bloodhound does but no server is required to use this tool. It's great for…☆501Updated this week
- Tool to authenticate to an LDAP/S server with a certificate through Schannel written in Rust. 🦀☆77Oct 10, 2026Updated 3 weeks ago
- Research notes on Windows Component Object Model (COM) attack surface for offensive security and vulnerability research. Covers COM hijac…☆164Jul 20, 2026Updated 3 months ago
- End-to-end Docker lab reproducing Apache log4j2 #4255 — FilteredObjectInputStream allowlist bypass via java.rmi.MarshalledObject (unfilte…☆29Aug 26, 2026Updated 2 months ago
- CVE-2025-59501 POC code☆26Nov 20, 2025Updated 11 months ago
- Code and data for our paper "Onelogon: Taking over Active Directory Accounts via Netlogon" (WOOT’26).☆129Sep 1, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A personal RAG system for offensive security knowledge☆178Aug 11, 2026Updated 2 months ago
- Tailscale/Headscale C2 profile and agent for Mythic☆34Mar 14, 2026Updated 7 months ago
- Extract PRT cookies remotely with InteractiveToken Scheduled Tasks☆15Aug 13, 2026Updated 2 months ago
- ☆109Sep 18, 2026Updated last month
- A header-only, freestanding C++20 template for IR-bytecode VM loaders☆27May 10, 2026Updated 5 months ago
- In-memory BOF implementation of Silent Process Exit LSASS dump via RtlReportSilentProcessExit☆19Apr 14, 2026Updated 6 months ago
- DynLoader A modular Windows loader focused on EDR evasion Built with indirect syscall (Tartarus Gate / Hell’s Gate), Manual PE parsing …☆82Jul 10, 2026Updated 3 months ago