Alternatives and similar repositories for scrying

Users that are interested in scrying are comparing it to the libraries listed below

• nodauf / GoMapEnum
  User enumeration and password bruteforce on Azure, ADFS, OWA, O365, Teams and gather emails on Linkedin
  ☆472Updated 3 weeks ago
• pwnfoo / NTLMRecon
  Enumerate information from NTLM authentication enabled web endpoints 🔎
  ☆496Updated 3 weeks ago
• optiv / Talon
  A password guessing tool that targets the Kerberos and LDAP services within the Windows Active Directory environment.
  ☆444Updated 2 years ago
• klezVirus / vortex
  VPN Overall Reconnaissance, Testing, Enumeration and eXploitation Toolkit
  ☆442Updated last year
• snovvcrash / DivideAndScan
  Divide full port scan results and use it for targeted Nmap runs
  ☆328Updated last year
• capt-meelo / MassMap
  Combined port scanning w/ Masscan's speed & Nmap's scanning features.
  ☆155Updated 3 years ago
• busterb / msmailprobe
  Office 365 and Exchange Enumeration
  ☆191Updated 6 years ago
• horizon3ai / CVE-2021-38647
  Proof on Concept Exploit for CVE-2021-38647 (OMIGOD)
  ☆233Updated 4 years ago
• nyxgeek / ntlmscan
  scan for NTLM directories
  ☆370Updated 2 months ago
• m0n1x90 / ADReaper
  A fast enumeration tool for Windows Active Directory Pentesting written in Go
  ☆279Updated 2 years ago
• mlgualtieri / NTLMRawUnHide
  NTLMRawUnhide.py is a Python3 script designed to parse network packet capture files and extract NTLMv2 hashes in a crackable format. The …
  ☆368Updated last year
• NotSoSecure / Blacklist3r
  project-blacklist3r
  ☆589Updated 2 weeks ago
• optiv / Go365
  An Office365 User Attack Tool
  ☆643Updated last year
• SecuProject / ADenum
  AD Enum is a pentesting tool that allows to find misconfiguration through the the protocol LDAP and exploit some of those weaknesses with…
  ☆305Updated 2 years ago
• mhaskar / DNSStager
  Hide your payload in DNS
  ☆615Updated 2 years ago
• ly4k / Pachine
  Python implementation for CVE-2021-42278 (Active Directory Privilege Escalation)
  ☆277Updated 3 years ago
• nodauf / Girsh
  Automatically spawn a reverse shell fully interactive for Linux or Windows victim
  ☆353Updated 2 years ago
• hausec / ProxyLogon
  ☆296Updated last year
• h4x0r-dz / RCE-Exploit-in-BIG-IP
  ☆205Updated 4 years ago
• ShutdownRepo / smartbrute
  Password spraying and bruteforcing tool for Active Directory Domain Services
  ☆383Updated 11 months ago
• gremwell / o365enum
  Enumerate valid usernames from Office 365 using ActiveSync, Autodiscover v1, or office.com login page.
  ☆284Updated last year
• horizon3ai / CVE-2022-1388
  POC for CVE-2022-1388
  ☆231Updated 3 years ago
• zeronetworks / cornershot
  Amplify network visibility from multiple POV of other hosts
  ☆305Updated last year
• pucarasec / zuthaka
  Zuthaka is an open source application designed to assist red-teaming efforts, by simplifying the task of managing different APTs and othe…
  ☆178Updated 2 years ago
• alt3kx / CVE-2021-21985_PoC
  ☆215Updated 2 years ago
• 0xC01DF00D / Collabfiltrator
  Exfiltrate blind Remote Code Execution and SQL injection output over DNS via Burp Collaborator.
  ☆271Updated 8 months ago
• ropnop / go-windapsearch
  Utility to enumerate users, groups and computers from a Windows domain through LDAP queries
  ☆394Updated 4 years ago
• swisskyrepo / SharpLAPS
  Retrieve LAPS password from LDAP
  ☆424Updated 4 years ago
• fkasler / phishmonger
  Phishing Framework for Pentesters
  ☆198Updated 2 years ago
• blackarrowsec / pivotnacci
  A tool to make socks connections through HTTP agents
  ☆716Updated 4 years ago