Demo code JavaScript POC that tricks user into sending Windows hash to responder
☆37Dec 12, 2025Updated 9 months ago
Alternatives and similar repositories for DragonHash
Users that are interested in DragonHash are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆166May 5, 2025Updated last year
- A bunch of shenanigans using functions, VEH and more☆37Jun 8, 2025Updated last year
- ☆16Jan 9, 2025Updated last year
- Dynamic Indirect Syscalls via JOP/ROP in Pure no_std, no_alloc, no dependency Rust☆44Aug 6, 2025Updated last year
- a small script to collect information from a management point☆37Jan 19, 2026Updated 8 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- PrimitiveInjection by using Read, Write and Allocation Primitives.☆54Jun 21, 2025Updated last year
- Proof of concept exploit for Ivanti EPM CVE-2024-13159 and others☆13Feb 19, 2025Updated last year
- ADAttributeHound is an OpenGraph extension for BloodHound that exports Active Directory custom attributes as node properties.☆23Jun 18, 2026Updated 3 months ago
- Unix Process hollowing in rust☆22Dec 16, 2024Updated last year
- ☆22Mar 6, 2023Updated 3 years ago
- Linker for Beacon Object Files☆191Sep 16, 2026Updated last week
- Automated Pass-the-Ticket (PtT) attack. Standalone alternative to Rubeus and Mimikatz for this attack. In C#, C++, Crystal, Python, Rust,…☆155Aug 31, 2026Updated 3 weeks ago
- Vectored Exception Handling Squared☆33Dec 27, 2025Updated 8 months ago
- A small collection of Crystal Palace PIC loaders designed for use with Cobalt Strike☆243Apr 11, 2026Updated 5 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- tool for requesting Entra ID's P2P certificate and authenticating to a remote Entra joinned devices with it☆135Aug 23, 2025Updated last year
- TokenCert☆104Nov 15, 2024Updated last year
- Attempting to Hook LSASS APIs to Retrieve Plaintext Credentials☆61May 12, 2025Updated last year
- AzDevRecon is a powerful web-based enumeration tool for offensive security professionals, red teamers, and pentesters targeting Azure Dev…☆32Oct 13, 2025Updated 11 months ago
- A collection of DPAPI hunting and parsing BOFs☆39Mar 3, 2026Updated 6 months ago
- JSONPath-plus Remote Code Execution☆21Feb 26, 2025Updated last year
- A Python POC for CRED1 over SOCKS5☆172Oct 5, 2024Updated last year
- PoC for CVE-2025-4660 demonstrating exploitation of the Forescout SecureConnector on Windows☆16Jul 16, 2025Updated last year
- find dll base addresses without PEB WALK☆169Jul 13, 2025Updated last year
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- modified mssqlclient from impacket to extract policies from the SCCM database☆49Feb 24, 2026Updated 6 months ago
- SACL Scanner is a tool designed to scan and analyze SACLs.☆53Feb 13, 2025Updated last year
- ☆149Sep 9, 2025Updated last year
- Toolkit of Projects to attack and evade Event Trace for Windows☆26Aug 28, 2025Updated last year
- BOF with Synthetic Stackframe☆265Oct 30, 2025Updated 10 months ago
- A tool for coercing and relaying Kerberos authentication over DCOM and RPC.☆151Jul 17, 2025Updated last year
- ☆99Sep 1, 2024Updated 2 years ago
- GPOAnalyzer is a tool designed to assist in parsing domain Group Policy Object (GPO) files located in the SYSVOL directory.☆29Jun 14, 2024Updated 2 years ago
- Request device ticket/token using the device's MSA☆37Aug 25, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Golang search engine scraper intended for identification of published ClickOnce deployments☆93Nov 19, 2024Updated last year
- ☆38Apr 15, 2025Updated last year
- AWS SSO Device-Code Phishing Toolkit for Red / Purple Teams☆23Mar 10, 2026Updated 6 months ago
- A tool to interact with Kerberos to request, forge and convert various types of tickets in an Active Directory environment.☆71Jul 6, 2026Updated 2 months ago
- BYOVD hunter to help prioritize windows drivers worth manual analysis☆132Aug 19, 2025Updated last year
- A small How-To on creating your own weaponized WSL file☆128Jul 23, 2025Updated last year
- Parses cached certificate templates from a Windows Registry file and displays them in the same style as Certipy does☆96Jul 3, 2025Updated last year