Alternatives and similar repositories for profilehound

Users that are interested in profilehound are comparing it to the libraries listed below

• jarnovandenbrink / getSPNless
  Python tool to automatically perform SPN-less RBCD attacks.
  ☆99Updated 2 weeks ago
• Thunter-HackTeam / EvilentCoerce
  ☆157Updated 8 months ago
• cybrly / badsuccessor
  ☆120Updated 7 months ago
• TheManticoreProject / Delegations
  A tool to work with all types of Kerberos delegations (unconstrained, constrained, and resource-based constrained delegations) in Active …
  ☆213Updated last week
• sud0Ru / NauthNRPC
  Enumerate Domain Users Without Authentication
  ☆281Updated 9 months ago
• Shac0x / Wonka
  Wonka is a sweet Windows tool that extracts Kerberos tickets from the Local Security Authority (LSA) cache. Like finding a ticket, but fo…
  ☆161Updated 3 months ago
• synacktiv / CVE-2024-43468
  ☆94Updated last year
• OleFredrik1 / remoteKrbRelayx
  A tool for coercing and relaying Kerberos authentication over DCOM and RPC.
  ☆146Updated 6 months ago
• decoder-it / printerbugnew
  The DCERPC only printerbug.py version
  ☆194Updated 2 months ago
• Leo4j / Invoke-SMBRemoting
  Interactive Shell and Command Execution over Named-Pipes (SMB) for Fileless lateral movement
  ☆180Updated 8 months ago
• The-Viper-One / Invoke-RDPThief
  Inject RDPThief into memory with PowerShell.
  ☆65Updated last year
• logangoins / Stifle
  .NET Post-Exploitation Utility for Abusing Strong Explicit Certificate Mappings in ADCS
  ☆150Updated 11 months ago
• 1r0BIT / TaskHound
  Tool to enumerate privileged Scheduled Tasks on Remote Systems
  ☆267Updated last week
• p0dalirius / ShareHound
  A python tool to map the access rights of network shares into a BloodHound OpenGraphs easily
  ☆250Updated last month
• cisagov / snafflepy
  Snaffler reimplementation in Python - https://github.com/SnaffCon/Snaffler
  ☆116Updated 6 months ago
• 0xedh / dumpguard_bof
  Beacon Object File (BOF) port of DumpGuard for extracting NTLMv1 hashes from sessions on modern Windows systems.
  ☆189Updated 2 weeks ago
• RedTeamPentesting / keycred
  Generate and Manage KeyCredentialLinks
  ☆180Updated 3 months ago
• ShutdownRepo / dcshadow
  Python alternative to Mimikatz lsadump::dcshadow
  ☆155Updated 6 months ago
• LeighlinRamsay / GunnerC2
  ☆152Updated 3 months ago
• The-Viper-One / Invoke-PassTheCert
  Pure PowerShell port of PassTheCert tool to authenticate to an LDAP/S server with a certificate through Schannel
  ☆59Updated 9 months ago
• nromsdahl / squarephish2
  OAuth Device Code Phishing Toolkit
  ☆107Updated 4 months ago
• logangoins / SOAPy
  SOAPy is a Proof of Concept (PoC) tool for conducting offensive interaction with Active Directory Web Services (ADWS) from Linux hosts.
  ☆156Updated last week
• SpecterOps / MSSQLHound
  PowerShell collector for adding MSSQL attack paths to BloodHound with OpenGraph
  ☆283Updated last week
• 7hePr0fess0r / ADCSDevilCOM
  A C# tool for requesting certificates from ADCS using DCOM over SMB. This tool allows you to remotely request X.509 certificates from CA …
  ☆163Updated 2 months ago
• synacktiv / OUned
  The OUned project automating Active Directory Organizational Units ACL exploitation through gPLink poisoning
  ☆153Updated 2 months ago
• rtecCyberSec / RAITrigger
  Local SYSTEM auth trigger for relaying
  ☆167Updated 6 months ago
• dagowda / PrimeEncryptor
  ☆79Updated 8 months ago
• rubenformation / ms-photos_NTLM_Leak
  New 0 day vulnerability allowing to leak NTLM hashes from browsers with one click
  ☆184Updated 2 months ago
• Offensive-Panda / LsassReflectDumping
  This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…
  ☆213Updated last year
• vysecurity / ExfilServer
  Client-side Encrypted Upload Server Python Script
  ☆66Updated 6 months ago