Alternatives and similar repositories for zerologon:

Users that are interested in zerologon are comparing it to the libraries listed below

• blurbdust / ldd2bh
  Convert ldapdomaindump to Bloodhound
  ☆78Updated last year
• laxa / SharpSecretsdump
  Secretsdump C# version only supporting local (live) operation
  ☆48Updated last year
• d3lb3 / KeePass-the-Hash
  A script that greps composite key-like strings from a KeePassXC process dump, then uses a customized version of pykeepass library to unlo…
  ☆31Updated 2 years ago
• crisprss / magicNetdefs
  Similar to Petitpotam, the netdfs service is enabled in Windows Server and AD environments, and the abused RPC method allows privileged p…
  ☆49Updated 2 years ago
• blacklanternsecurity / dp_cryptomg
  Another tool for exploiting CVE-2017-9248, a cryptographic weakness in Telerik UI for ASP.NET AJAX dialog handler.
  ☆45Updated 5 months ago
• Leo4j / PowerDACL
  A tool to abuse weak permissions of Active Directory Discretionary Access Control Lists (DACLs) and Access Control Entries (ACEs)
  ☆52Updated last month
• Vozec / CVE-2023-22527
  This repository presents a proof-of-concept of CVE-2023-22527
  ☆13Updated last year
• p0dalirius / pyLootApacheServerStatus
  A script to automatically dump all URLs present in /server-status to a file locally.
  ☆23Updated 3 months ago
• RayRRT / Active-Directory-Certificate-Services-abuse
  ☆44Updated 2 years ago
• former-farmer / CVE-2023-24955-PoC
  Exploit for Microsoft SharePoint 2019
  ☆14Updated last year
• NotMedic / Invoke-Nanodump
  HelpSystems Nanodump, but wrapped in powershell via Invoke-ReflectivePEInjection
  ☆53Updated 2 years ago
• p0dalirius / MSRPRN-Coerce
  A python script to force authentication using MS-RPRN RemoteFindFirstPrinterChangeNotificationEx function (opnum 65).
  ☆20Updated 2 years ago
• aas-n / aclpwn.py
  Active Directory ACL exploitation with BloodHound
  ☆12Updated 3 years ago
• wfinn / redirex
  tool that generates bypasses for open redirects
  ☆50Updated 2 years ago
• cspshivam / sweetuu
  Sweetuu is a Advance Shell which can be used to achieve RCE easily through LFI & RFI. For easy wins in bug bounty, upload sweetuu instead…
  ☆10Updated last month
• liquidsec / aspnetCryptTools
  Just some random small tools for dealing with asp.net Forms Authentication Cookies
  ☆23Updated 3 years ago
• Tw1sm / aesKrbKeyGen
  Generate AES128/256 Kerberos keys for an AD account using a plaintext password and Python3
  ☆50Updated 2 years ago
• HernanRodriguez1 / ScanReflectedSSTI
  Template Nuclei SSTI
  ☆29Updated last year
• OtterHacker / Cerbere
  ☆46Updated last year
• whokilleddb / SOAPHound
  SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Dire…
  ☆33Updated 8 months ago
• surajpkhetani / Active-Directory-Permission-Abuse
  ☆12Updated 2 years ago
• numanturle / CVE-2022-41040
  CVE-2022-41040 nuclei template
  ☆18Updated 2 years ago
• bugch3ck / SharpLdapWhoami
  WhoAmI by asking the LDAP service on a domain controller.
  ☆60Updated 2 years ago
• LuemmelSec / CVE-2023-29357
  ☆52Updated last year
• iomoath / PyExchangePasswordSpray
  Microsoft Exchange password spray tool with proxy support.
  ☆40Updated 3 years ago
• eversinc33 / CredGuess
  Generate password spraying lists based on the pwdLastSet-attribute of users.
  ☆55Updated last year
• kleiton0x00 / contexter
  Contexter - A secondary context path traversal / server-side parameter pollution testing tool written in Python 3
  ☆21Updated 5 months ago
• nyxgeek / autodiscover_enum
  time-based user enum via Basic Auth in Azure against Autodiscover
  ☆31Updated 3 months ago
• eversinc33 / SharpStartWebclient
  Programmatically start WebClient from an unprivileged session to enable that juicy privesc.
  ☆71Updated last year
• praetorian-inc / NTLMRecon
  A tool for performing light brute-forcing of HTTP servers to identify commonly accessible NTLM authentication endpoints.
  ☆81Updated last year