Alternatives and similar repositories for scrying:

Users that are interested in scrying are comparing it to the libraries listed below

• optiv / Talon
  A password guessing tool that targets the Kerberos and LDAP services within the Windows Active Directory environment.
  ☆437Updated last year
• nodauf / GoMapEnum
  User enumeration and password bruteforce on Azure, ADFS, OWA, O365, Teams and gather emails on Linkedin
  ☆439Updated last year
• nyxgeek / ntlmscan
  scan for NTLM directories
  ☆354Updated 9 months ago
• SpiderLabs / scavenger
  scavenger : is a multi-threaded post-exploitation scanning tool for scavenging systems, finding most frequently used files and folders a…
  ☆336Updated 6 years ago
• klezVirus / vortex
  VPN Overall Reconnaissance, Testing, Enumeration and eXploitation Toolkit
  ☆431Updated last year
• gremwell / o365enum
  Enumerate valid usernames from Office 365 using ActiveSync, Autodiscover v1, or office.com login page.
  ☆265Updated 11 months ago
• busterb / msmailprobe
  Office 365 and Exchange Enumeration
  ☆184Updated 5 years ago
• optiv / Go365
  An Office365 User Attack Tool
  ☆632Updated last year
• m0n1x90 / ADReaper
  A fast enumeration tool for Windows Active Directory Pentesting written in Go
  ☆279Updated 2 years ago
• capt-meelo / MassMap
  Combined port scanning w/ Masscan's speed & Nmap's scanning features.
  ☆148Updated 2 years ago
• pwnfoo / NTLMRecon
  Enumerate information from NTLM authentication enabled web endpoints 🔎
  ☆478Updated 9 months ago
• dirkjanm / adidnsdump
  Active Directory Integrated DNS dumping by any authenticated user
  ☆989Updated 4 months ago
• NotSoSecure / Blacklist3r
  project-blacklist3r
  ☆530Updated 3 weeks ago
• skelsec / msldap
  LDAP library for auditing MS AD
  ☆410Updated 2 weeks ago
• blackarrowsec / pivotnacci
  A tool to make socks connections through HTTP agents
  ☆692Updated 4 years ago
• ropnop / go-windapsearch
  Utility to enumerate users, groups and computers from a Windows domain through LDAP queries
  ☆373Updated 4 years ago
• mlgualtieri / NTLMRawUnHide
  NTLMRawUnhide.py is a Python3 script designed to parse network packet capture files and extract NTLMv2 hashes in a crackable format. The …
  ☆336Updated last year
• SecuProject / ADenum
  AD Enum is a pentesting tool that allows to find misconfiguration through the the protocol LDAP and exploit some of those weaknesses with…
  ☆298Updated last year
• ShutdownRepo / smartbrute
  Password spraying and bruteforcing tool for Active Directory Domain Services
  ☆361Updated 5 months ago
• mhaskar / DNSStager
  Hide your payload in DNS
  ☆612Updated last year
• shifty0g / ultimate-nmap-parser
  parse nmap files
  ☆149Updated last year
• krabelize / icmpdoor
  ICMP Reverse Shell written in Python 3 and with Scapy (backdoor/rev shell)
  ☆342Updated 7 months ago
• Isona / dirble
  Fast directory scanning and scraping tool
  ☆621Updated last week
• snovvcrash / DivideAndScan
  Divide full port scan results and use it for targeted Nmap runs
  ☆318Updated 9 months ago
• p0dalirius / pyFindUncommonShares
  FindUncommonShares is a Python script allowing to quickly find uncommon shares in vast Windows Domains, and filter by READ or WRITE acces…
  ☆411Updated last month
• praetorian-inc / fingerprintx
  Standalone utility for service discovery on open ports!
  ☆604Updated 3 weeks ago
• ropnop / impacket_static_binaries
  Standalone binaries for Linux/Windows of Impacket's examples
  ☆726Updated last year
• paranoidninja / Boomerang
  Boomerang is a tool to expose multiple internal servers to web/cloud. Agent & Server are pretty stable and can be used in Red Team for Mu…
  ☆221Updated 4 years ago
• evilmog / ntlmv1-multi
  NTLMv1 Multitool
  ☆612Updated 3 weeks ago
• blackarrowsec / mssqlproxy
  mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socke…
  ☆738Updated 4 years ago