Alternatives and similar repositories for zerologon:

Users that are interested in zerologon are comparing it to the libraries listed below

• blurbdust / ldd2bh
  Convert ldapdomaindump to Bloodhound
  ☆78Updated last year
• Vozec / CVE-2023-22527
  This repository presents a proof-of-concept of CVE-2023-22527
  ☆12Updated last year
• HernanRodriguez1 / ScanReflectedSSTI
  Template Nuclei SSTI
  ☆29Updated last year
• crisprss / magicNetdefs
  Similar to Petitpotam, the netdfs service is enabled in Windows Server and AD environments, and the abused RPC method allows privileged p…
  ☆49Updated 2 years ago
• wfinn / redirex
  tool that generates bypasses for open redirects
  ☆52Updated 2 years ago
• RayRRT / Active-Directory-Certificate-Services-abuse
  ☆45Updated 2 years ago
• former-farmer / CVE-2023-24955-PoC
  Exploit for Microsoft SharePoint 2019
  ☆13Updated last year
• eversinc33 / CredGuess
  Generate password spraying lists based on the pwdLastSet-attribute of users.
  ☆55Updated last year
• laxa / SharpSecretsdump
  Secretsdump C# version only supporting local (live) operation
  ☆50Updated last year
• Leo4j / PowerDACL
  A tool to abuse weak permissions of Active Directory Discretionary Access Control Lists (DACLs) and Access Control Entries (ACEs)
  ☆55Updated 2 months ago
• p0dalirius / MSRPRN-Coerce
  A python script to force authentication using MS-RPRN RemoteFindFirstPrinterChangeNotificationEx function (opnum 65).
  ☆20Updated 2 weeks ago
• aas-n / aclpwn.py
  Active Directory ACL exploitation with BloodHound
  ☆12Updated 3 years ago
• blacklanternsecurity / dp_cryptomg
  Another tool for exploiting CVE-2017-9248, a cryptographic weakness in Telerik UI for ASP.NET AJAX dialog handler.
  ☆50Updated 6 months ago
• NotMedic / Invoke-Nanodump
  HelpSystems Nanodump, but wrapped in powershell via Invoke-ReflectivePEInjection
  ☆54Updated 3 years ago
• d3lb3 / KeePass-the-Hash
  A script that greps composite key-like strings from a KeePassXC process dump, then uses a customized version of pykeepass library to unlo…
  ☆31Updated 2 years ago
• momo1239 / buffshark-shellcode-runner
  Shellcode runner to execute malicious payload and bypass AV
  ☆14Updated 3 years ago
• liquidsec / aspnetCryptTools
  Just some random small tools for dealing with asp.net Forms Authentication Cookies
  ☆23Updated 3 years ago
• websecnl / MagicByteSelector
  Burp Suite Extension for inserting a magic byte into responder's request
  ☆22Updated last year
• cspshivam / sweetuu
  Sweetuu is a Advance Shell which can be used to achieve RCE easily through LFI & RFI. For easy wins in bug bounty, upload sweetuu instead…
  ☆10Updated 2 months ago
• icyguider / PowerChunker
  Bypass AMSI via PowerShell by splitting a file into multiple chunks
  ☆50Updated 3 years ago
• YossiSassi / Invoke-AdminSDHolderPermissionCheck
  Analyzes AdminSDHolder permissions & compares with a previous run, to detect potential backdoor/excessive persistent permission(s)
  ☆14Updated last year
• EvilEnigma / OSEP-Study
  A repository of tools developed while studying for OSEP. The contents here are not part of courseware but some tools, i wrote as an exten…
  ☆1Updated 9 months ago
• n0tspam / RunspaceLoader
  Launches a limited shell using PowerShell Runspaces with an optional AMSI Bypass. Does not invoke Powershell.exe
  ☆13Updated last year
• Tw1sm / aesKrbKeyGen
  Generate AES128/256 Kerberos keys for an AD account using a plaintext password and Python3
  ☆50Updated 2 years ago
• iomoath / PyExchangePasswordSpray
  Microsoft Exchange password spray tool with proxy support.
  ☆40Updated 3 years ago
• numanturle / CVE-2022-41040
  CVE-2022-41040 nuclei template
  ☆18Updated 2 years ago
• edermi / gophish_mods
  Open-Source Phishing Toolkit
  ☆18Updated 3 years ago
• k3nundrum / redteamtips
  ☆15Updated last year
• tunelko / CVE-2022-22954-PoC
  VMware Workspace ONE Access and Identity Manager RCE via SSTI - Test script for shodan, file or manual.
  ☆11Updated last year
• byt3hx / research
  The purpose of this repo is to share my research
  ☆14Updated last year