Alternatives and similar repositories for ExchangeFinder

Users that are interested in ExchangeFinder are comparing it to the libraries listed below

• HernanRodriguez1 / MimikatzFUD
  ☆99Updated 3 years ago
• kh4sh3i / exchange-penetration-testing
  The great Microsoft exchange hack: A penetration tester’s guide (exchange penetration testing)
  ☆96Updated last year
• improsec / BackupOperatorToolkit
  The BackupOperatorToolkit contains different techniques allowing you to escalate from Backup Operator to Domain Admin
  ☆177Updated 2 years ago
• AssuranceMaladieSec / AD-description-password-finder
  Retrieve AD accounts description and search for password in it
  ☆83Updated 2 years ago
• p0dalirius / DumpSMBShare
  A python script to dump files and folders remotely from a Windows SMB share.
  ☆224Updated 4 months ago
• NVISOsecurity / pyCobaltHound
  pyCobaltHound is an Aggressor script extension for Cobalt Strike which aims to provide a deep integration between Cobalt Strike and Blood…
  ☆138Updated 2 years ago
• 0xBallpoint / LOAD
  Lord Of Active Directory - automatic vulnerable active directory on AWS
  ☆146Updated last year
• ananth-she11z / AutoSQL
  A tool to enumerate and exploit SQL Servers in AD
  ☆34Updated last year
• ShutdownRepo / impacket
  Impacket is a collection of Python classes for working with network protocols.
  ☆72Updated 9 months ago
• dadevel / mssql-spider
  Automated exploitation of MSSQL servers at scale
  ☆108Updated 2 weeks ago
• horizon3ai / backup_dc_registry
  A simple POC that abuses Backup Operator privileges to remote dump SAM, SYSTEM, and SECURITY
  ☆83Updated 3 years ago
• p0dalirius / MSSQL-Analysis-Coerce
  A technique to coerce a Windows SQL Server to authenticate on an arbitrary machine.
  ☆129Updated last year
• JPG0mez / ADCSync
  Use ESC1 to perform a makeshift DCSync and dump hashes
  ☆209Updated last year
• synacktiv / GPOddity
  The GPOddity project, aiming at automating GPO attack vectors through NTLM relaying (and more).
  ☆306Updated 6 months ago
• Luct0r / KerberOPSEC
  OPSEC safe Kerberoasting in C#
  ☆192Updated 2 years ago
• garrettfoster13 / aced
  ☆159Updated 6 months ago
• ShutdownRepo / ShadowCoerce
  MS-FSRVP coercion abuse PoC
  ☆291Updated 3 years ago
• dievus / PowerShellRunner
  PowerShell runner for executing malicious payloads in order to bypass Windows Defender.
  ☆72Updated 3 years ago
• zblurx / acltoolkit
  ACL abuse swiss-knife
  ☆123Updated 2 years ago
• praetorian-inc / NTLMRecon
  A tool for performing light brute-forcing of HTTP servers to identify commonly accessible NTLM authentication endpoints.
  ☆91Updated last year
• RedSiege / AutoFunkt
  Python script for automating the creation of serverless cloud redirectors from Cobalt Strike malleable C2 profiles
  ☆197Updated 11 months ago
• rootSySdk / PowerGPOAbuse
  Powershell version of SharpGPOAbuse
  ☆78Updated 4 years ago
• VirtualAlllocEx / Payload-Download-Cradles
  This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR …
  ☆257Updated 2 years ago
• cepxeo / dll4shell
  Shellcode launcher for AV bypass
  ☆215Updated last year
• Laokoon-SecurITy / Cortex-XDR-Config-Extractor
  Cortex XDR Config Extractor
  ☆132Updated 2 years ago
• LudovicPatho / CVE-2022-26923_AD-Certificate-Services
  The vulnerability allowed a low-privileged user to escalate privileges to domain administrator in a default Active Directory environment …
  ☆44Updated 3 years ago
• slemire / WSPCoerce
  PoC to coerce authentication from Windows hosts using MS-WSP
  ☆239Updated last year
• Tw1sm / PySQLRecon
  Offensive MSSQL toolkit written in Python, based off SQLRecon
  ☆202Updated 4 months ago
• 0x4xel / Bat-Potato
  Automating Juicy Potato Local Privilege Escalation CMD exploit for penetration testers.
  ☆45Updated 2 years ago
• arth0sz / Practice-AD-CS-Domain-Escalation
  Introductory guide on the configuration and subsequent exploitation of Active Directory Certificate Services with Certipy. Based on the w…
  ☆129Updated last year