laxa / SharpSecretsdump
Secretsdump C# version only supporting local (live) operation
☆49Updated 2 weeks ago
Alternatives and similar repositories for SharpSecretsdump:
Users that are interested in SharpSecretsdump are comparing it to the libraries listed below
- SAM Dumping in C#☆48Updated 3 months ago
- HelpSystems Nanodump, but wrapped in powershell via Invoke-ReflectivePEInjection☆55Updated 3 years ago
- Generate AES128/256 Kerberos keys for an AD account using a plaintext password and Python3☆52Updated 2 years ago
- Modified versions of the Cobalt Strike Process Injection Kit☆94Updated last year
- Programmatically start WebClient from an unprivileged session to enable that juicy privesc.☆74Updated 2 years ago
- Click Once + App Domain☆61Updated last year
- SuperSharpShares is a tool designed to automate enumerating domain shares, allowing for quick verification of accessible shares by your a…☆74Updated last year
- Active Directory certificate abuse☆39Updated 2 years ago
- Cobalt Strike beacon object file that allows you to query and make changes to the Windows Registry☆27Updated 4 years ago
- Run Cobalt Strike BOFs in Brute Ratel C4!☆66Updated 3 weeks ago
- ☆86Updated last year
- WhoAmI by asking the LDAP service on a domain controller.☆62Updated 3 years ago
- Windows Persistence Toolkit in C#☆36Updated 2 years ago
- ☆71Updated last year
- A script that greps composite key-like strings from a KeePassXC process dump, then uses a customized version of pykeepass library to unlo…☆32Updated 2 years ago
- Enumerate information from NTLM authentication enabled web endpoints 🔎☆35Updated last year
- Cobalt Strike BOF for quser.exe implementation using Windows API☆85Updated 2 years ago
- ☆141Updated 3 years ago
- C# implementation of Get-AADIntSyncCredentials from AADInternals, which extracts Azure AD Connect credentials to AD and Azure AD from AAD…☆40Updated last year
- ☆49Updated 2 years ago
- Lateral Movement via the .NET Profiler☆81Updated 5 months ago
- Similar to Petitpotam, the netdfs service is enabled in Windows Server and AD environments, and the abused RPC method allows privileged p…☆49Updated 2 years ago
- Read the contents of MS Word Documents using Cobalt Strike's Execute-Assembly☆117Updated 7 months ago
- A third-party Gopher Assassin for the Havoc Framework.☆44Updated last year
- A LAPS dumper written using the impacket library.☆31Updated last year
- Active Directory certificate abuse.☆38Updated 3 years ago
- CNA that interacts with a JAR file to dynamically rename GUI tabs within Cobalt Strike from a JSON file.☆24Updated 2 years ago
- C# Port of LdapRelayScan☆83Updated 3 years ago
- An old Windows workstations LPE for domain environments without LDAP signing/channel binding.☆32Updated 2 years ago
- Beacon Object Files (not Buffer Overflows)☆54Updated 2 years ago