morRubin / NegoExRelay

Related projects ⓘ

Alternatives and complementary repositories for NegoExRelay

• 0xe7 / RoastInTheMiddle
  ☆68Updated last year
• n00py / GetFGPP
  Get Fine Grained Password Policy
  ☆65Updated 6 months ago
• SpecterOps / cred1py
  A Python POC for CRED1 over SOCKS5
  ☆134Updated last month
• daem0nc0re / Abusing_Weak_ACL_on_Certificate_Templates
  Investigation about ACL abusing for Active Directory Certificate Services (AD CS)
  ☆119Updated 3 years ago
• csandker / pxethiefy
  ☆36Updated last month
• synacktiv / OUned
  The OUned project automating Active Directory Organizational Units ACL exploitation through gPLink poisoning
  ☆78Updated 7 months ago
• LaresLLC / SuperSharpShares
  SuperSharpShares is a tool designed to automate enumerating domain shares, allowing for quick verification of accessible shares by your a…
  ☆64Updated 6 months ago
• 0xthirteen / AssemblyHunter
  Find .net assemblies locally
  ☆92Updated 2 years ago
• wotwot563 / aad_prt_bof
  ☆73Updated 7 months ago
• MayerDaniel / profiler-lateral-movement
  Lateral Movement via the .NET Profiler
  ☆76Updated this week
• fortalice / pyldapsearch
  Tool for issuing manual LDAP queries which offers bofhound compatible output
  ☆48Updated 5 months ago
• Octoberfest7 / Presentations
  Slide decks and/or materials from conference presentations
  ☆54Updated 2 years ago
• SySS-Research / ldif2bloodhound
  Convert an LDIF file to JSON files ingestible by BloodHound
  ☆40Updated 2 months ago
• mertdas / SharpLateral
  Lateral Movement
  ☆119Updated last year
• scottctaylor12 / Red-Lambda
  Leveraging AWS Lambda Function URLs for C2 Redirection
  ☆24Updated last year
• BC-SECURITY / ScriptBlock-Smuggling
  Example code samples from our ScriptBlock Smuggling Blog post
  ☆83Updated 5 months ago
• lkarlslund / hashmuncher
  Grab NetNTLMv2 hashes using ETW with administrative rights on Windows 8.1 / Windows Server 2016 and later
  ☆89Updated last year
• BronzeBee / DavRelayUp
  An old Windows workstations LPE for domain environments without LDAP signing/channel binding.
  ☆28Updated last year
• mgeeky / msi-shenanigans
  Proof of Concept code and samples presenting emerging threat of MSI installer files.
  ☆77Updated last year
• rasta-mouse / PPEnum
  Simple BOF to read the protection level of a process
  ☆104Updated last year
• eversinc33 / SharpStartWebclient
  Programmatically start WebClient from an unprivileged session to enable that juicy privesc.
  ☆66Updated last year
• Acceis / bqm
  Deduplicate custom BloudHound queries from different datasets and merge them in one customqueries.json file.
  ☆36Updated 8 months ago
• Dramelac / GoldenCopy
  Copy the properties and groups of a user from neo4j (bloodhound) to create an identical golden ticket.
  ☆80Updated 6 months ago
• bitsadmin / lofl
  Living Off the Foreign Land setup scripts
  ☆63Updated 3 weeks ago
• shelltrail / cmloot
  ☆37Updated 11 months ago
• G0ldenGunSec / GetWebDAVStatus
  Determine if the WebClient Service (WebDAV) is running on a remote system
  ☆123Updated 8 months ago
• MrAle98 / Sliver-PortBender
  Sliver extension performing TCP redirection tasks without performing cross-process injection.
  ☆57Updated 5 months ago
• EvilBytecode / Lifetime-Amsi-EtwPatch
  Two in one, patch lifetime powershell console, no more etw and amsi!
  ☆79Updated 4 months ago
• t94j0 / adexplorersnapshot-rs
  ☆66Updated 3 months ago
• JumpsecLabs / WALK_WebAssembly_Lure_Krafter
  A web assembly (WASM) phishing lure generator based on pre-built templates and written in Rust with some GenAI assistance. W.A.L.K. aims …
  ☆59Updated 2 months ago