knavesec / CredMaster

Related projects ⓘ

Alternatives and complementary repositories for CredMaster

• blacklanternsecurity / TREVORspray
  TREVORspray is a modular password sprayer with threading, clever proxying, loot modules, and more!
  ☆1,066Updated last week
• blacklanternsecurity / MANSPIDER
  Spider entire networks for juicy files sitting on SMB shares. Search filenames or file content - regex supported!
  ☆1,022Updated 4 months ago
• CravateRouge / bloodyAD
  BloodyAD is an Active Directory Privilege Escalation Framework
  ☆1,254Updated 2 weeks ago
• Greenwolf / ntlm_theft
  A tool for generating multiple types of NTLMv2 hash theft files by Jacob Wilkin (Greenwolf)
  ☆1,008Updated 5 months ago
• 0xZDH / o365spray
  Username enumeration and password spraying tool aimed at Microsoft O365.
  ☆770Updated 2 weeks ago
• 61106960 / adPEAS
  Powershell tool to automate Active Directory enumeration.
  ☆1,010Updated 3 months ago
• CompassSecurity / BloodHoundQueries
  ☆617Updated last year
• login-securite / DonPAPI
  Dumping DPAPI credz remotely
  ☆1,010Updated 2 weeks ago
• optiv / Go365
  An Office365 User Attack Tool
  ☆624Updated 8 months ago
• hausec / Bloodhound-Custom-Queries
  Custom Query list for the Bloodhound GUI based off my cheatsheet
  ☆750Updated last year
• knavesec / Max
  Maximizing BloodHound. Max is a good boy.
  ☆502Updated 3 months ago
• BeetleChunks / SpoolSploit
  A collection of Windows print spooler exploits containerized with other utilities for practical exploitation.
  ☆552Updated 3 years ago
• RythmStick / AMSITrigger
  The Hunt for Malicious Strings
  ☆1,097Updated 2 years ago
• eladshamir / Whisker
  Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, …
  ☆814Updated last week
• p0dalirius / Coercer
  A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.
  ☆1,804Updated last month
• S3cur3Th1sSh1t / PowerSharpPack
  ☆1,528Updated 5 months ago
• chvancooten / OSEP-Code-Snippets
  A repository with my notable code snippets for Offensive Security's PEN-300 (OSEP) course.
  ☆1,162Updated 10 months ago
• outflanknl / C2-Tool-Collection
  A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techni…
  ☆1,143Updated last year
• nyxgeek / onedrive_user_enum
  onedrive user enumeration - pentest tool to enumerate valid o365 users
  ☆623Updated last month
• S1ckB0y1337 / Cobalt-Strike-CheatSheet
  Some notes and examples for cobalt strike's functionality
  ☆988Updated 2 years ago
• Flangvik / TeamFiltration
  TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts
  ☆1,064Updated 6 months ago
• rasta-mouse / ThreatCheck
  Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.
  ☆1,053Updated 5 months ago
• Wh04m1001 / DFSCoerce
  ☆735Updated 2 years ago
• antonioCoco / RogueWinRM
  Windows Local Privilege Escalation from Service Account to System
  ☆698Updated 4 years ago
• skahwah / SQLRecon
  A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.
  ☆666Updated 2 months ago
• r3motecontrol / Ghostpack-CompiledBinaries
  Compiled Binaries for Ghostpack
  ☆1,181Updated 3 weeks ago
• c3c / ADExplorerSnapshot.py
  ADExplorerSnapshot.py is an AD Explorer snapshot parser. It is made as an ingestor for BloodHound, and also supports full-object dumping …
  ☆890Updated last month
• mgeeky / PackMyPayload
  A PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file form…
  ☆862Updated 5 months ago
• rvrsh3ll / TokenTactics
  Azure JWT Token Manipulation Toolset
  ☆602Updated last year
• grimlockx / ADCSKiller
  An ADCS Exploitation Automation Tool Weaponizing Certipy and Coercer
  ☆702Updated last year