Alternatives and similar repositories for sshspray

Users that are interested in sshspray are comparing it to the libraries listed below

• snovvcrash / peas
  Modified version of PEAS client for offensive operations
  ☆41Updated 2 years ago
• snovvcrash / KrbRelayUp
  KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default…
  ☆12Updated 2 years ago
• ZeroPointSecurity / Domain-Enumeration-Tool
  Perform Windows domain enumeration via LDAP
  ☆36Updated 2 years ago
• blurbdust / ldd2bh
  Convert ldapdomaindump to Bloodhound
  ☆80Updated last year
• AlteredSecurity / RBCD
  Script written in python to perform Resource-Based Constrained Delegation (RBCD) attack by leveraging Impacket toolkit.
  ☆21Updated 3 years ago
• d3lb3 / KeePass-the-Hash
  A script that greps composite key-like strings from a KeePassXC process dump, then uses a customized version of pykeepass library to unlo…
  ☆32Updated 2 years ago
• surajpkhetani / Active-Directory-Permission-Abuse
  ☆12Updated 2 years ago
• ZephrFish / SandboxSpy
  Code for profiling sandboxes - Initially an idea to profile sandboxes, the code is written to take enviromental variables and send them b…
  ☆20Updated 2 weeks ago
• k3nundrum / redteamtips
  ☆15Updated last year
• ZarvisD / Azure-AD
  Azure pentesting reference for Altered Security Lab
  ☆24Updated 3 years ago
• curtbraz / PhishingFromMS365API
  A Couple of Python Scripts Leveraging MS365's GraphAPI to Send Custom Calendar Events / Emails from Cheap O365 Accounts
  ☆18Updated last year
• zblurx / BloodHoundCustomQueries
  My BloodHound custom queries
  ☆23Updated 2 years ago
• deletehead / the_hax
  Checklist for pentests, handy commands for to remembers, and a few tools to work on here and there. Far from complete!
  ☆26Updated last year
• GhostManager / cobalt_sync
  Standalone Cobalt Strike operation logging Aggressor script for Ghostwriter 2.0+
  ☆26Updated 9 months ago
• Flangvik / collector
  Utility to analyse, ingest and push out credentials from common data sources during an internal penetration test.
  ☆19Updated 2 years ago
• aniqfakhrul / certifried.py
  ☆16Updated 2 years ago
• 4ndr34z / prenum
  ☆27Updated 2 years ago
• joeminicucci / RedIra
  A cloud automation system for Red Teams based on Terraform and Ansible
  ☆23Updated 4 years ago
• NinjaStyle82 / rbcd_permissions
  Add SD for controlled computer object to a target object for RBCD using LDAP
  ☆38Updated 3 years ago
• crisprss / magicNetdefs
  Similar to Petitpotam, the netdfs service is enabled in Windows Server and AD environments, and the abused RPC method allows privileged p…
  ☆49Updated 2 years ago
• RedSiege / CredCheck
  .NET wrapper around LogonUserA to test creds
  ☆12Updated 2 years ago
• aas-n / aclpwn.py
  Active Directory ACL exploitation with BloodHound
  ☆12Updated 3 years ago
• RythmStick / ProxyPunch
  Finding SSL Blindspots for Red Teams
  ☆32Updated 4 years ago
• OffsecDeer / TargetedTimeroast
  Tamper Active Directory user attributes to collect their hashes with MS-SNTP
  ☆26Updated 3 months ago
• Sh11td0wn / winrm_kerb_shell
  Ruby script that calls an almost interactive shell via WinRM (TCP/5985) on an Windows machine, relaying on a valid Kerberos ticket. (Very…
  ☆18Updated 5 years ago
• ohoph / 3bowla
  Python3 Ebowla... 3Bowla
  ☆17Updated 5 years ago
• tothi / CVE-2021-1675
  C# and Impacket implementation (here with Kerberos auth support) of PrintNightmare CVE-2021-1675/CVE-2021-34527
  ☆29Updated 3 years ago
• Leo4j / Find-LocalAdminAccess
  Check the Domain for Local Admin Access
  ☆14Updated 2 months ago
• RiccardoAncarani / GPOPowerParser
  A script that parses PowerView's output for GPO analysis. Integrated into bloodhound to find misconfigurations of URA, SMB signing etc
  ☆14Updated 5 years ago
• sinnaj-r / NTLMssp-Extract
  A small Python-Script to extract NetNTLMv2 Hashes from NTMLssp-HTTP-Authentications, which were captured in a pcap.
  ☆25Updated 2 years ago