Alternatives and similar repositories for Certipy:

Users that are interested in Certipy are comparing it to the libraries listed below

• GhostPack / Certify
  Active Directory certificate abuse.
  ☆1,565Updated 5 months ago
• SnaffCon / Snaffler
  a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )
  ☆2,209Updated 2 months ago
• login-securite / lsassy
  Extract credentials from lsass remotely
  ☆2,079Updated 2 weeks ago
• Flangvik / SharpCollection
  Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure …
  ☆2,351Updated last week
• dirkjanm / BloodHound.py
  A Python based ingestor for BloodHound
  ☆1,997Updated 2 weeks ago
• p0dalirius / Coercer
  A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.
  ☆1,860Updated last month
• GhostPack / Rubeus
  Trying to tame the three-headed dog.
  ☆4,243Updated 4 months ago
• gtworek / Priv2Admin
  Exploitation paths allowing you to (mis)use the Windows Privileges to elevate your rights within the OS.
  ☆2,032Updated last year
• ropnop / kerbrute
  A tool to perform Kerberos pre-auth bruteforcing
  ☆2,747Updated 4 months ago
• itm4n / PrintSpoofer
  Abusing impersonation privileges through the "Printer Bug"
  ☆1,910Updated 4 years ago
• CravateRouge / bloodyAD
  BloodyAD is an Active Directory Privilege Escalation Framework
  ☆1,401Updated 3 weeks ago
• r3motecontrol / Ghostpack-CompiledBinaries
  Compiled Binaries for Ghostpack
  ☆1,232Updated 2 months ago
• itm4n / PrivescCheck
  Privilege Escalation Enumeration Script for Windows
  ☆3,062Updated last month
• safebuffer / vulnerable-AD
  Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab
  ☆2,042Updated 9 months ago
• SpecterOps / SharpHound
  C# Data Collector for BloodHound
  ☆809Updated last week
• Greenwolf / ntlm_theft
  A tool for generating multiple types of NTLMv2 hash theft files by Jacob Wilkin (Greenwolf)
  ☆1,047Updated 7 months ago
• topotam / PetitPotam
  PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.
  ☆1,884Updated 5 months ago
• Dec0ne / KrbRelayUp
  KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default…
  ☆1,554Updated 2 years ago
• login-securite / DonPAPI
  Dumping DPAPI credz remotely
  ☆1,044Updated 2 months ago
• S3cur3Th1sSh1t / Amsi-Bypass-Powershell
  This repo contains some Amsi Bypass methods i found on different Blog Posts.
  ☆1,786Updated last month
• davidprowe / BadBlood
  BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of…
  ☆2,075Updated last year
• fortra / nanodump
  The swiss army knife of LSASS dumping
  ☆1,840Updated 4 months ago
• nettitude / PoshC2
  A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.
  ☆1,857Updated 3 weeks ago
• dirkjanm / krbrelayx
  Kerberos unconstrained delegation abuse toolkit
  ☆1,212Updated last week
• S3cur3Th1sSh1t / PowerSharpPack
  ☆1,547Updated 7 months ago
• dafthack / DomainPasswordSpray
  DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will auto…
  ☆1,821Updated 6 months ago
• 61106960 / adPEAS
  Powershell tool to automate Active Directory enumeration.
  ☆1,033Updated 2 weeks ago
• skelsec / pypykatz
  Mimikatz implementation in pure Python
  ☆2,935Updated 2 weeks ago
• optiv / ScareCrow
  ScareCrow - Payload creation framework designed around EDR bypass.
  ☆2,768Updated last year
• lefayjey / linWinPwn
  linWinPwn is a bash script that streamlines the use of a number of Active Directory tools
  ☆1,858Updated this week