Alternatives and similar repositories for Proxyshell-Exchange

Users that are interested in Proxyshell-Exchange are comparing it to the libraries listed below

• blurbdust / ldd2bh
  Convert ldapdomaindump to Bloodhound
  ☆80Updated last year
• nyxgeek / rpcfiend
  Use rpc null sessions to retrieve machine list, domain admin list, domain controllers
  ☆14Updated 2 years ago
• cheshireca7 / smbAutoRelay
  SMB Auto Relay provides the automation of SMB/NTLM Relay technique for pentesting and red teaming exercises in active directory environme…
  ☆47Updated 4 years ago
• snovvcrash / peas
  Modified version of PEAS client for offensive operations
  ☆41Updated 2 years ago
• Hypnoze57 / RDPChecker
  RDP Checker
  ☆63Updated last year
• bassammaged / awsEnum
  Enumerate AWS cloud resources based on provided credential
  ☆51Updated 3 years ago
• iomoath / PyExchangePasswordSpray
  Microsoft Exchange password spray tool with proxy support.
  ☆40Updated 4 years ago
• AlteredSecurity / RBCD
  Script written in python to perform Resource-Based Constrained Delegation (RBCD) attack by leveraging Impacket toolkit.
  ☆21Updated 4 years ago
• optionalCTF / SSOh-No
  User enumeration and password spraying tool for testing Azure AD
  ☆70Updated 3 years ago
• RythmStick / ProxyPunch
  Finding SSL Blindspots for Red Teams
  ☆32Updated 4 years ago
• blacklanternsecurity / fulcrom
  A web shell for pivoting and lateral movement
  ☆34Updated 7 years ago
• 0xZDH / msspray
  A basic username enumeration and password spraying tool aimed at spraying Microsoft's DOM based authentication using selenium.
  ☆36Updated last year
• expl0itabl3 / Redsheet
  Red Teaming & Active Directory Cheat Sheet.
  ☆40Updated last year
• p0dalirius / sectools
  A Python native library containing lots of useful functions to write efficient scripts to hack stuff.
  ☆36Updated last month
• bigb0sss / goPassGen
  Easily-guessable Password Generator for Password Spray Attack
  ☆21Updated 5 years ago
• Leo4j / Find-LocalAdminAccess
  Check the Domain for Local Admin Access
  ☆16Updated 4 months ago
• p0dalirius / FindAzureDomainTenant
  A Python script to find tenant id an region from a list of domain names.
  ☆15Updated 5 months ago
• NinjaStyle82 / rbcd_permissions
  Add SD for controlled computer object to a target object for RBCD using LDAP
  ☆38Updated 3 years ago
• snovvcrash / PCredz
  This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, …
  ☆19Updated 2 years ago
• Chocapikk / CVE-2022-22954
  Python script to exploit CVE-2022-22954 and then exploit CVE-2022-22960
  ☆2Updated 3 years ago
• n0kovo / DomainDouche
  OSINT tool abusing SecurityTrails domain suggestion API to find potentially related domains by keyword and brute force.
  ☆26Updated 2 years ago
• grahamhelton / dehashQuery
  A script used to query the dehashed API and filter for more useful results
  ☆16Updated 4 years ago
• ZarvisD / Azure-AD
  Azure pentesting reference for Altered Security Lab
  ☆24Updated 3 years ago
• b1gbroth3r / red-team-infrastructure-example
  A basic Terraform configuration for provisioning simple red team infrastructure in DigitalOcean
  ☆12Updated 4 years ago
• s0lst1c3 / SharpFinder
  ☆33Updated 5 years ago
• d3lb3 / KeePass-the-Hash
  A script that greps composite key-like strings from a KeePassXC process dump, then uses a customized version of pykeepass library to unlo…
  ☆32Updated 2 years ago
• snovvcrash / KrbRelayUp
  KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default…
  ☆14Updated 2 years ago
• warferik / CVE-2019-3980
  ☆18Updated 4 years ago
• 0xe7 / PowerSploit
  PowerSploit - A PowerShell Post-Exploitation Framework
  ☆42Updated 3 months ago
• praetorian-inc / NTLMRecon
  A tool for performing light brute-forcing of HTTP servers to identify commonly accessible NTLM authentication endpoints.
  ☆92Updated last year