Alternatives and similar repositories for scrying

Users that are interested in scrying are comparing it to the libraries listed below

• pwnfoo / NTLMRecon
  Enumerate information from NTLM authentication enabled web endpoints 🔎
  ☆498Updated 2 months ago
• nodauf / GoMapEnum
  User enumeration and password bruteforce on Azure, ADFS, OWA, O365, Teams and gather emails on Linkedin
  ☆476Updated 2 months ago
• optiv / Talon
  A password guessing tool that targets the Kerberos and LDAP services within the Windows Active Directory environment.
  ☆447Updated 2 years ago
• capt-meelo / MassMap
  Combined port scanning w/ Masscan's speed & Nmap's scanning features.
  ☆156Updated 3 years ago
• NotSoSecure / Blacklist3r
  project-blacklist3r
  ☆617Updated last month
• busterb / msmailprobe
  Office 365 and Exchange Enumeration
  ☆197Updated 6 years ago
• snovvcrash / DivideAndScan
  Divide full port scan results and use it for targeted Nmap runs
  ☆329Updated last year
• horizon3ai / CVE-2021-38647
  Proof on Concept Exploit for CVE-2021-38647 (OMIGOD)
  ☆233Updated 4 years ago
• nyxgeek / ntlmscan
  scan for NTLM directories
  ☆375Updated 3 months ago
• optiv / Go365
  An Office365 User Attack Tool
  ☆644Updated last year
• 0xC01DF00D / Collabfiltrator
  Exfiltrate blind Remote Code Execution and SQL injection output over DNS via Burp Collaborator.
  ☆273Updated 10 months ago
• mlgualtieri / NTLMRawUnHide
  NTLMRawUnhide.py is a Python3 script designed to parse network packet capture files and extract NTLMv2 hashes in a crackable format. The …
  ☆378Updated 2 years ago
• ly4k / Pachine
  Python implementation for CVE-2021-42278 (Active Directory Privilege Escalation)
  ☆277Updated 3 years ago
• nodauf / Girsh
  Automatically spawn a reverse shell fully interactive for Linux or Windows victim
  ☆356Updated 2 years ago
• klezVirus / vortex
  VPN Overall Reconnaissance, Testing, Enumeration and eXploitation Toolkit
  ☆445Updated 2 years ago
• mubix / IOXIDResolver
  IOXIDResolver.py from AirBus Security
  ☆263Updated 2 years ago
• gremwell / o365enum
  Enumerate valid usernames from Office 365 using ActiveSync, Autodiscover v1, or office.com login page.
  ☆288Updated last year
• SecuProject / ADenum
  AD Enum is a pentesting tool that allows to find misconfiguration through the the protocol LDAP and exploit some of those weaknesses with…
  ☆306Updated 2 years ago
• m0n1x90 / ADReaper
  A fast enumeration tool for Windows Active Directory Pentesting written in Go
  ☆279Updated 2 years ago
• blackarrowsec / pivotnacci
  A tool to make socks connections through HTTP agents
  ☆717Updated 4 years ago
• paranoidninja / Boomerang
  Boomerang is a tool to expose multiple internal servers to web/cloud. Agent & Server are pretty stable and can be used in Red Team for Mu…
  ☆226Updated 4 years ago
• hausec / ProxyLogon
  ☆296Updated last year
• skelsec / msldap
  LDAP library for auditing MS AD
  ☆476Updated last month
• mhaskar / DNSStager
  Hide your payload in DNS
  ☆615Updated 2 years ago
• epi052 / recon-pipeline
  An automated target reconnaissance pipeline.
  ☆442Updated 2 years ago
• ShutdownRepo / smartbrute
  Password spraying and bruteforcing tool for Active Directory Domain Services
  ☆385Updated last year
• ARPSyndicate / kenzer
  automated web assets enumeration & scanning [DEPRECATED]
  ☆289Updated 2 years ago
• ropnop / go-windapsearch
  Utility to enumerate users, groups and computers from a Windows domain through LDAP queries
  ☆397Updated 4 years ago
• swisskyrepo / SharpLAPS
  Retrieve LAPS password from LDAP
  ☆429Updated 4 years ago
• SecurityRiskAdvisors / cmd.jsp
  A super small jsp webshell with file upload capabilities.
  ☆313Updated 4 years ago