Active Directory engagement workspace that combines offline tradecraft, operator-ready commands, attack path analysis, and automated playbook generation from SharpHound/BloodHound data.
☆23Jun 24, 2026Updated 4 months ago
Alternatives and similar repositories for CrownHunter
Users that are interested in CrownHunter are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Unbind port 445/tcp on Windows☆14Jul 11, 2025Updated last year
- Steal Net-NTLMv1 hashes for logged on users without dumping LSASS☆16May 11, 2026Updated 5 months ago
- An Ansible collection that installs an SCCM deployment with optional configurations.☆18Oct 22, 2026Updated last week
- POC for CVE-2025-54918 and a technical demonstration.☆65Jan 12, 2026Updated 9 months ago
- Pure PowerShell port of PassTheCert tool to authenticate to an LDAP/S server with a certificate through Schannel☆18May 22, 2026Updated 5 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- NFS Scanner is a Python tool designed to scan, list, and mount NFS shares on a given network range or a single IP address.☆10Oct 27, 2025Updated last year
- Beacon Object file set service sd☆11Mar 6, 2023Updated 3 years ago
- ☆21Sep 2, 2026Updated last month
- ☆16Jul 30, 2026Updated 2 months ago
- Beacon Object File (BOF) to retrieve and decrypt the the LAPSv2 password from the Windows Active Directory and Microsoft Azure/Entra Acti…☆21Oct 24, 2025Updated last year
- This Burp plugin allow copy all authentication headers by one click☆13Mar 23, 2026Updated 7 months ago
- Python tool to automatically perform SPN-less RBCD attacks.☆132Jan 7, 2026Updated 9 months ago
- A proof of concept AMSI & ETW bypass using trampolines for hooking and modifying execution flow☆19Jun 26, 2025Updated last year
- ☆31Apr 1, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- CVE-2026-41651 — PackageKit TOCTOU LPE☆17Apr 25, 2026Updated 6 months ago
- resux' reference sheets☆32Updated this week
- Combining KslDump and GhostKatz to dump LSASS using no-fix KslD.sys memory read to bypass PPL. Extracts MSV1_0 NT hashes and WDigest clea…☆79Mar 25, 2026Updated 7 months ago
- NetExec MCP☆89Oct 18, 2026Updated last week
- Linux Space Booster is an advanced, secure disk space cleanup utility specifically designed for Linux virtual machines. It intelligently …☆18Jun 15, 2025Updated last year
- Collection of tools, scripts, one-liners, templates, dorks and more☆12Mar 21, 2026Updated 7 months ago
- Dashboard for Cirro☆15Aug 7, 2026Updated 2 months ago
- Transform LDAP filters, BaseDNs, attribute lists, and attribute entries using composable middleware chains. Zero dependencies. Works as a…☆44Apr 13, 2026Updated 6 months ago
- In-memory Encrypted Shellcode Execution Suite☆15Jan 26, 2026Updated 9 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A vulnerable reverse proxy that reflects real world findings and novel research.☆20Aug 20, 2026Updated 2 months ago
- Nim-based encryption tool for obfuscating shellcode and payloads for evading Windows Defender.☆28Jul 14, 2026Updated 3 months ago
- Experimentations with the MSBuild Capabilites in a default environment.☆24Dec 6, 2025Updated 10 months ago
- GhostHound is a BloodHound OpenGraph extension that surfaces Active Directory tombstone reanimation as a first-class attack path, enumera…☆47Aug 9, 2026Updated 2 months ago
- custom impacket mssqlclient☆26Sep 16, 2023Updated 3 years ago
- ☆25Sep 6, 2025Updated last year
- open source implementation of the UDC2 spec used in Cobalt Strike☆60Jul 4, 2026Updated 3 months ago
- Certighost POC☆338Jul 28, 2026Updated 3 months ago
- Small wiki for Mobile Application Penetration Testing Tools☆12Apr 8, 2021Updated 5 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- PoC script to demonstrate collection of SCCM attack paths that can be viewed in BH with OpenGraph☆26Aug 2, 2025Updated last year
- Windows SSH Misconfiguration Discovery Tool - Map lateral movement paths through misconfigured SSH services in Active Directory environme…☆93May 11, 2026Updated 5 months ago
- A BOF to create a scheduled task using a COM object.☆23Sep 1, 2026Updated last month
- Drop any Windows DPAPI artifact and it identifies the format and the exact master key it needs, then decrypts once you supply the key. Of…☆30Sep 23, 2026Updated last month
- The ADSyncDump BOF is a port of Dirk-Jan Mollema's adconnectdump.py / ADSyncDecrypt into a Beacon Object File (BOF) with zero dependencie…☆183Sep 3, 2025Updated last year
- This is an advanced Windows loader framework designed for stealthy code injection, anti-analysis, and evasion. It combines direct system …☆14Aug 6, 2025Updated last year
- Powerful Wireless Network Auditing Framework - 2023☆13Sep 10, 2023Updated 3 years ago