Alternatives and similar repositories for PyADRecon

Users that are interested in PyADRecon are comparing it to the libraries listed below

• xpn / adfstoolkit

  View on GitHub
  ☆37Jan 7, 2025Updated last year
• EricEsquivel / CobaltStrike-Linux-Beacon

  View on GitHub
  Proof of Concept (PoC) implant for creating custom Cobalt Strike Beacons
  ☆94Updated this week
• piraija / import-custom-bloodhound-queries

  View on GitHub
  Import custom queries into BloodHound CE from a legacy BloodHound JSON file.
  ☆10Mar 22, 2024Updated last year
• Thoxy67 / zig-pe

  View on GitHub
  RunPE loader written in Zig
  ☆16Sep 2, 2024Updated last year
• CyberCX-STA / Peep

  View on GitHub
  A tool designed to hook into Windows applications and output named (and anonymous?) pipe traffic.
  ☆14Feb 27, 2024Updated last year
• YOLOP0wn / yolo-mssqlclient

  View on GitHub
  custom impacket mssqlclient
  ☆26Sep 16, 2023Updated 2 years ago
• gam4er / SneakyRun

  View on GitHub
  Some stuff for PHD2021
  ☆14May 21, 2025Updated 8 months ago
• eversinc33 / UnXorStringsNet

  View on GitHub
  Deobfuscation of XorStringsNet
  ☆14Nov 5, 2024Updated last year
• octopwn / wsnet-dotnet

  View on GitHub
  ☆12Jan 7, 2025Updated last year
• FatRodzianko / Get-Writable

  View on GitHub
  Find world writable directories that contain a .exe or .dll file
  ☆13Aug 31, 2021Updated 4 years ago
• eversinc33 / RDPassSpray

  View on GitHub
  Python3 tool to perform password spraying using RDP
  ☆16Aug 14, 2023Updated 2 years ago
• obikuro / Sato

  View on GitHub
  SATO is a PowerShell tool focuses on providing flexible, multi-grant type support for obtaining, managing, and analyzing Azure tokens.
  ☆20Nov 24, 2025Updated 2 months ago
• Logisek / AZexec

  View on GitHub
  The Azure Execution Tool
  ☆83Feb 6, 2026Updated last week
• MaangoTaachyon / SelfDeletion-Updated

  View on GitHub
  Updated version of a long known self deletion technique to work with 24H2.
  ☆61Jun 9, 2025Updated 8 months ago
• nettitude / SharpConflux

  View on GitHub
  ☆65Mar 15, 2024Updated last year
• emiltayl / encrust

  View on GitHub
  Rust crate to obfuscate strings and byte arrays so they are not in memory when not in use.
  ☆19Dec 23, 2025Updated last month
• dobin / defender2yara

  View on GitHub
  Convert Microsoft Defender Antivirus Signatures (VDM) into a SQL DB
  ☆24Jun 27, 2025Updated 7 months ago
• OtterHacker / AWSDoor

  View on GitHub
  AWSDoor is a red team automation tool designed to simulate advanced attacker behavior in AWS environments
  ☆30Sep 17, 2025Updated 4 months ago
• PortSwigger / reissue-request-scripter

  View on GitHub
  ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks)
  ☆30Dec 16, 2021Updated 4 years ago
• adamhlt / Cave-Finder

  View on GitHub
  Tool to find code cave in PE image (x86 / x64) - Find empty space to place code in PE files
  ☆70Aug 1, 2023Updated 2 years ago
• sap8899 / Group3rExplorer

  View on GitHub
  Fun GUI for Group3rs output log
  ☆37Aug 14, 2023Updated 2 years ago
• kypvas / LDIFToBloodHound

  View on GitHub
  A Windows tool that converts LDIF files to BloodHound CE
  ☆25Dec 20, 2025Updated last month
• jfjallid / kerbtool

  View on GitHub
  A tool to interact with Kerberos to request, forge and convert various types of tickets in an Active Directory environment.
  ☆64Jun 10, 2025Updated 8 months ago
• jfmaes / Red-Route53-Interactive

  View on GitHub
  ☆19Aug 26, 2020Updated 5 years ago
• Vsimpro / pingback.transfer

  View on GitHub
  Use WordPress pingback.ping to transfer files.
  ☆16Feb 25, 2024Updated last year
• nbaertsch / nimHeapEnc

  View on GitHub
  Heap encryption in Nim
  ☆20Aug 25, 2024Updated last year
• realstatus / CVE-2024-40711-Exp

  View on GitHub
  CVE-2024-40711-exp
  ☆42Oct 17, 2024Updated last year
• Cracked5pider / eop24-26229

  View on GitHub
  A firebeam plugin that exploits the CVE-2024-26229 vulnerability to perform elevation of privilege from a unprivileged user
  ☆40Aug 15, 2024Updated last year
• mandiant / cleanldap

  View on GitHub
  ☆164Oct 21, 2025Updated 3 months ago
• kozmer / rspy

  View on GitHub
  rust port of pspy with support for process monitoring over dbus
  ☆35Jan 4, 2026Updated last month
• HuskyHacks / windows-x64-shellcode-pipeline

  View on GitHub
  A Dockerized build pipeline for custom Windows x64 shellcode
  ☆53Dec 12, 2025Updated 2 months ago
• MythicAgents / Hannibal

  View on GitHub
  A Mythic Agent written in PIC C.
  ☆206Feb 4, 2025Updated last year
• JayGLXR / NomadLoader

  View on GitHub
  An advanced utility for converting Windows Portable Executable (PE) files to position-independent code (PIC) shellcode. It enables execut…
  ☆64Mar 1, 2025Updated 11 months ago
• iilegacyyii / DataInject-BOF

  View on GitHub
  Hijacks code execution via overwriting Control Flow Guard pointers in combase.dll
  ☆135Apr 18, 2025Updated 9 months ago
• boh / terraform-phishing

  View on GitHub
  Build a phishing server (Gophish) together with SMTP-redirector (Postfix) automatically in Digital Ocean with terraform and ansible..
  ☆20Jul 7, 2021Updated 4 years ago
• Wh04m1001 / PICDumper

  View on GitHub
  ☆26Mar 10, 2022Updated 3 years ago
• OleFredrik1 / remoteKrbRelayx

  View on GitHub
  A tool for coercing and relaying Kerberos authentication over DCOM and RPC.
  ☆146Jul 17, 2025Updated 6 months ago
• artemy-ccrsky / DecryptRecoveryLAPS_RPC

  View on GitHub
  A way to maintain long-term access to Windows LAPS for lateral movement in AD via installing an Offensive LAPS RPC backdoor on a DC.
  ☆29Jun 9, 2025Updated 8 months ago
• unkn0wn-r1d3r / EvilBurp

  View on GitHub
  Automated Evilginx phishlet creator Extension for Burpsuite
  ☆62Jan 10, 2025Updated last year