AD CS exploitation related stuff goes here
☆41Mar 23, 2026Updated 7 months ago
Alternatives and similar repositories for Certi-Bhai
Users that are interested in Certi-Bhai are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Reflective DLL loader.☆26Jun 30, 2026Updated 3 months ago
- Crystal port of GodPotato to abuse SeImpersonatePrivilege with indirect syscalls, dynamic API resolution and compile-time string obfuscat…☆128Aug 22, 2026Updated 2 months ago
- Automated Pass-the-Ticket (PtT) attack. Standalone alternative to Rubeus and Mimikatz for this attack. In C#, C++, Crystal, Python, Rust,…☆155Aug 31, 2026Updated last month
- PoC for generating an APPWIZ.cpl module designed to be loaded by Fondue.exe LOLBin☆16Jan 2, 2026Updated 9 months ago
- ☆21Sep 2, 2026Updated last month
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Remote service-staging tool built on Impacket, designed for BOF-style lateral movement workflows that lets you upload custom service load…☆131Dec 7, 2025Updated 10 months ago
- Another new coercion primitive with LPE - machine-account NTLM coercion from a non-admin user via Windows Store InstallService plugin res…☆89Jun 20, 2026Updated 4 months ago
- ☆16Aug 25, 2025Updated last year
- Proof of concept for CVE-2025-13780☆14Dec 12, 2025Updated 10 months ago
- CVE-2025-59501 POC code☆26Nov 20, 2025Updated 11 months ago
- Kernel-mode process terminator using a signed BYOVD driver. Works on all Windows 10/11. No offsets, no PDB. Rust.☆109Updated this week
- New 0 day vulnerability allowing to leak NTLM hashes from browsers with one click☆209Nov 18, 2025Updated 11 months ago
- ☆13Feb 12, 2026Updated 8 months ago
- Ask a TGS on behalf of another user without password☆10Dec 3, 2023Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A PoC of User-Defined Reflective Loader for Havoc Framework built with Cystal Palace☆46Oct 18, 2026Updated last week
- sl0ppy-PrivescTaskCreator.ps1☆41Sep 29, 2026Updated last month
- Active Directory information dumper via ADWS for evasion purposes.☆322Oct 12, 2026Updated 2 weeks ago
- CVE-2026-42980 PUBLIC EXPLOIT + RESEARCH☆145Jul 7, 2026Updated 3 months ago
- ☆16Oct 12, 2025Updated last year
- ☆15Feb 18, 2025Updated last year
- Just another EDR killer☆142Jan 21, 2026Updated 9 months ago
- PowerShell tool that shows how to read and write NTLM OWF values via samlib.dll.☆75Oct 22, 2025Updated last year
- A C# tool for extracting information from SCCM PXE boot media.☆57May 21, 2026Updated 5 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Create local administrators in Windows using the SAMR API. In C#, Crystal, Python, Rust, Golang, Nim and Deno (Javascript)☆98Aug 31, 2026Updated last month
- Exploit AD CS misconfiguration allowing privilege escalation and persistence from any child domain to full forest compromise☆136Dec 2, 2023Updated 2 years ago
- A straightforward tool for exploiting SMTP Smuggling vulnerabilities.☆14Jul 22, 2024Updated 2 years ago
- PowerShell tool to deploy deceptive Active Directory objects, and audit them☆16Jan 7, 2026Updated 9 months ago
- Manage Shadows Copies via the VSS API using C#, C++, Crystal or Python. Working on Windows 11☆88Jan 26, 2026Updated 9 months ago
- Steal Net-NTLMv1 hashes for logged on users without dumping LSASS☆16May 11, 2026Updated 5 months ago
- A Bloodhound alternative. BloodBash will ingest the same files bloodhound does but no server is required to use this tool. It's great for…☆500Updated this week
- Modified version of PEAS client for offensive operations☆50May 18, 2026Updated 5 months ago
- TCP Port Forwarding Utility on C☆42Jun 18, 2026Updated 4 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- another PrivEsc potato...☆122Sep 5, 2026Updated last month
- powershell script i wrote that can suspend an arbitrary process (with limits)☆22Mar 26, 2023Updated 3 years ago
- Read-only Active Directory & Microsoft Entra ID hygiene auditor in pure PowerShell. Collect once, analyze offline: deterministic findings…☆21Updated this week
- Exploit for ToolShell☆15Nov 20, 2025Updated 11 months ago
- A proof of concept that makes a Windows syscall look like it came from a legitimate Windows thread pool, with no trace of your own code a…☆15Jul 15, 2026Updated 3 months ago
- POC tool for ResetNightmare (CVE-2026-27912)☆223Aug 20, 2026Updated 2 months ago
- Code and data for our paper "Onelogon: Taking over Active Directory Accounts via Netlogon" (WOOT’26).☆128Sep 1, 2026Updated last month