Alternatives and similar repositories for LocalKdc

Users that are interested in LocalKdc are comparing it to the libraries listed below

• jborean93 / AmsiProvider
  Test AMSI Provider implementation in C#
  ☆42Updated 9 months ago
• leftp / BackupCreds
  A C# implementation of dumping credentials from Windows Credential Manager
  ☆60Updated 2 years ago
• t94j0 / sddl_py
  Parse SDDL strings
  ☆36Updated last year
• ADPunisher / OwnershipStealer
  ☆26Updated 2 years ago
• Leo4j / KeyCredentialLink
  Add Shadow Credentials to a target object by editing their msDS-KeyCredentialLink attribute
  ☆23Updated last year
• WildByDesign / ACLViewer
  ACL Viewer for Windows
  ☆131Updated 5 months ago
• jonny-jhnson / LDAPMon
  ☆45Updated last year
• EspressoCake / ADIDNS_Parser
  Parser and reconciliation tooling for large Active Directory environments.
  ☆33Updated 7 months ago
• MaorSabag / Paruns-Fart
  Just another ntdll unhooking using Parun's Fart technique
  ☆75Updated 2 years ago
• lsecqt / SharpRedirect
  Simple C# Redirector
  ☆89Updated last month
• ahkeur / VEH2
  A Patchless AMSI Bypass Technique using VEH²
  ☆29Updated 3 months ago
• andreisss / Living-off-the-COM-Type-Coercion-Abuse
  This technique leverages PowerShell's .NET interop layer and COM automation to achieve stealthy command execution by abusing implicit typ…
  ☆51Updated 4 months ago
• rkbennett / RunAsPy
  ☆10Updated 4 months ago
• rbmm / SDD
  Self Delete DLL
  ☆23Updated last year
• ricardojoserf / SharpSelfDelete
  PoC to self-delete a binary in C#
  ☆34Updated last year
• Shrfnt77 / AmsiBypass
  Bypassing Amsi using LdrLoadDll
  ☆47Updated 9 months ago
• decoder-it / DFSCoerce-exe-2
  DFSCoerce exe revisited version with custom authentication
  ☆40Updated last year
• weaselsec / ClickOnce-AppDomain-Manager-Injection
  Click Once + App Domain
  ☆63Updated last year
• puzzlepeaches / NTLMRecon
  Enumerate information from NTLM authentication enabled web endpoints 🔎
  ☆34Updated 2 years ago
• olafhartong / ETWLocksmith
  A powerful Windows command-line tool for analyzing and searching ETW (Event Tracing for Windows) provider permissions from the Windows re…
  ☆59Updated 2 months ago
• ibaiC / FriendlyFireBOF
  A BOF that suspends non-GUI threads for a target process or resumes them resulting in stealthy process silencing.
  ☆56Updated 5 months ago
• S3cur3Th1sSh1t / SharpVeeamDecryptor
  Decrypt Veeam database passwords
  ☆160Updated last year
• JonasBK / Powershell
  ☆43Updated 8 months ago
• Allevon412 / SyscallTempering
  ☆28Updated last year
• HackmichNet / SharpAzToken
  ☆63Updated last year
• NocteDefensor / SCCMDecryptor-BOF
  ☆48Updated 3 months ago
• iamagarre / BadExclusionsNWBO
  BadExclusionsNWBO is an evolution from BadExclusions to identify folder custom or undocumented exclusions on AV/EDR
  ☆75Updated last year
• grayhatkiller / SharpExShell
  SharpExShell automates the DCOM lateral movment technique which abuses ActivateMicrosoftApp method of Excel application.
  ☆74Updated last year
• nettitude / TokenCert
  TokenCert
  ☆100Updated 10 months ago
• Teach2Breach / early_cascade_inj_rs
  early cascade injection PoC based on Outflanks blog post, in rust
  ☆60Updated 11 months ago