C# tool to identify and exploit weaknesses within MSSQL instances in Active Directory environments
☆119Feb 13, 2022Updated 4 years ago
Alternatives and similar repositories for SharpSQLPwn
Users that are interested in SharpSQLPwn are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- TokenCert☆105Nov 15, 2024Updated last year
- ☆200Mar 28, 2025Updated last year
- Add Shadow Credentials to a target object by editing their msDS-KeyCredentialLink attribute☆25Jun 5, 2024Updated 2 years ago
- DavRelayUp - a universal no-fix local privilege escalation in domain-joined windows workstations where LDAP signing is not enforced (the …☆582Jun 5, 2023Updated 3 years ago
- A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.☆818Jun 16, 2026Updated 4 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- C# implementation of TokenFinder. Steal M365 access tokens from Office Desktop apps☆146Feb 1, 2026Updated 8 months ago
- Programmatically start WebClient from an unprivileged session to enable that juicy privesc.☆80Feb 8, 2023Updated 3 years ago
- A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.☆400Jan 10, 2025Updated last year
- A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other ob…☆496Oct 14, 2022Updated 4 years ago
- .NET post-exploitation toolkit for Active Directory reconnaissance and exploitation☆401Jul 23, 2025Updated last year
- ☆240Oct 8, 2024Updated 2 years ago
- Example of using Sleep to create better named pipes.☆40Jul 25, 2023Updated 3 years ago
- A tool to abuse weak permissions of Active Directory Discretionary Access Control Lists (DACLs) and Access Control Entries (ACEs)☆64Feb 4, 2026Updated 8 months ago
- Dump NTDS with golden certificates and UnPAC the hash☆648Mar 20, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- An interactive shell to spoof some LOLBins command line☆188Jan 27, 2024Updated 2 years ago
- Reflective DLL to privesc from NT Service to SYSTEM using SeImpersonateToken privilege☆229Nov 23, 2023Updated 2 years ago
- Lateral Movement Using DCOM and DLL Hijacking☆325Jun 18, 2023Updated 3 years ago
- DFSCoerce exe revisited version with custom authentication☆43Jan 13, 2024Updated 2 years ago
- A BloodHound collector for Microsoft Configuration Manager☆404Jul 7, 2025Updated last year
- C# Port of LdapRelayScan☆95Nov 26, 2025Updated 11 months ago
- Active Directory reconnaissance and exploitation for Red Teams via the Active Directory Web Services (ADWS).☆607Mar 19, 2024Updated 2 years ago
- ☆247May 5, 2024Updated 2 years ago
- ☆138Dec 4, 2023Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆291Jul 20, 2023Updated 3 years ago
- Collection of Beacon Object Files (BOF) for Cobalt Strike☆714Sep 9, 2026Updated last month
- Ask a TGS on behalf of another user without password☆479Mar 30, 2025Updated last year
- ☆165Oct 25, 2023Updated 3 years ago
- Decrypt GlobalProtect configuration and cookie files.☆161Sep 10, 2024Updated 2 years ago
- ☆135Feb 11, 2025Updated last year
- Remote Kerberos Relay made easy! Advanced Kerberos Relay Framework☆650May 8, 2025Updated last year
- ForsHops☆156Mar 25, 2025Updated last year
- Lateral Movement as loggedon User via Speech Named Pipe COM & ISpeechNamedPipe + COM Hijacking☆150Jul 2, 2025Updated last year
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- The GPOddity project, aiming at automating GPO attack vectors through NTLM relaying (and more).☆385Aug 28, 2026Updated 2 months ago
- SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Dire…☆899Feb 3, 2024Updated 2 years ago
- NTLM relaying for Windows made easy☆585Apr 25, 2023Updated 3 years ago
- Local & remote Windows DLL Proxying☆171Jun 17, 2024Updated 2 years ago
- SharpSuccessor is a .NET Proof of Concept (POC) for fully weaponizing Yuval Gordon’s (@YuG0rd) BadSuccessor attack from Akamai.☆433Sep 26, 2025Updated last year
- A Python POC for CRED1 over SOCKS5☆171Oct 5, 2024Updated 2 years ago
- A Large Action Model designed to operate on MacOS or Windows which interacts with common C2 interfaces such as Cobalt Strike, Havoc, or B…☆25Feb 29, 2024Updated 2 years ago