Alternatives and similar repositories for profilehound

Users that are interested in profilehound are comparing it to the libraries listed below

• Thunter-HackTeam / EvilentCoerce
  ☆159Updated 9 months ago
• jarnovandenbrink / getSPNless
  Python tool to automatically perform SPN-less RBCD attacks.
  ☆116Updated last month
• TheManticoreProject / Delegations
  A tool to work with all types of Kerberos delegations (unconstrained, constrained, and resource-based constrained delegations) in Active …
  ☆213Updated last month
• sud0Ru / NauthNRPC
  Enumerate Domain Users Without Authentication
  ☆281Updated 9 months ago
• cybrly / badsuccessor
  ☆120Updated 8 months ago
• decoder-it / printerbugnew
  The DCERPC only printerbug.py version
  ☆201Updated 3 months ago
• Logisek / AZexec
  The Azure Execution Tool
  ☆83Updated last week
• p0dalirius / ShareHound
  A python tool to map the access rights of network shares into a BloodHound OpenGraphs easily
  ☆260Updated last week
• DotNetRussell / BloodBash
  A Bloodhound alternative. BloodBash will ingest the same files bloodhound does but no server is required to use this tool. It's great for…
  ☆43Updated this week
• dagowda / PrimeEncryptor
  ☆82Updated 9 months ago
• Leo4j / Invoke-SMBRemoting
  Interactive Shell and Command Execution over Named-Pipes (SMB) for Fileless lateral movement
  ☆181Updated 8 months ago
• OleFredrik1 / remoteKrbRelayx
  A tool for coercing and relaying Kerberos authentication over DCOM and RPC.
  ☆146Updated 6 months ago
• kfallahi / UnderlayCopy
  PowerShell toolkit that extracts locked Windows files (SAM, SYSTEM, NTDS, ...) using MFT parsing and raw disk reads
  ☆238Updated 3 months ago
• The-Viper-One / Invoke-RDPThief
  Inject RDPThief into memory with PowerShell.
  ☆65Updated last year
• synacktiv / CVE-2024-43468
  ☆94Updated last year
• 1r0BIT / TaskHound
  Tool to enumerate privileged Scheduled Tasks on Remote Systems
  ☆277Updated last month
• logangoins / Stifle
  .NET Post-Exploitation Utility for Abusing Strong Explicit Certificate Mappings in ADCS
  ☆150Updated last year
• Shac0x / Wonka
  Wonka is a sweet Windows tool that extracts Kerberos tickets from the Local Security Authority (LSA) cache. Like finding a ticket, but fo…
  ☆164Updated 3 months ago
• 0xedh / dumpguard_bof
  Beacon Object File (BOF) port of DumpGuard for extracting NTLMv1 hashes from sessions on modern Windows systems.
  ☆205Updated last month
• SenSecurity / Founding
  Founding is a generator that will create a loader encrypted or obfuscated with different execution types
  ☆121Updated 5 months ago
• 7hePr0fess0r / ADCSDevilCOM
  A C# tool for requesting certificates from ADCS using DCOM over SMB. This tool allows you to remotely request X.509 certificates from CA …
  ☆163Updated 3 months ago
• RedTeamPentesting / keycred
  Generate and Manage KeyCredentialLinks
  ☆241Updated 2 weeks ago
• decoder-it / KrbRelay-SMBServer
  ☆235Updated last year
• ZephrFish / pyLDAPGui
  Python based GUI for browsing LDAP
  ☆180Updated 2 months ago
• rtecCyberSec / RAITrigger
  Local SYSTEM auth trigger for relaying
  ☆168Updated 6 months ago
• Offensive-Panda / LsassReflectDumping
  This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…
  ☆212Updated last year
• SpecterOps / MSSQLHound
  PowerShell collector for adding MSSQL attack paths to BloodHound with OpenGraph
  ☆291Updated this week
• nromsdahl / squarephish2
  OAuth Device Code Phishing Toolkit
  ☆109Updated last week
• logangoins / SOAPy
  SOAPy is a Proof of Concept (PoC) tool for conducting offensive interaction with Active Directory Web Services (ADWS) from Linux hosts.
  ☆160Updated 3 weeks ago
• MazX0p / PhantomInjector
  Advanced In-Memory PowerShell Process Injection Framework
  ☆72Updated 6 months ago