Impack-only implementation of WinRM protocol with support for NTLM and Kerberos auth
☆140May 5, 2026Updated 5 months ago
Alternatives and similar repositories for winrmexec
Users that are interested in winrmexec are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Execute commands interactively on remote Windows machines using the WinRM protocol (just faster)☆407Sep 20, 2026Updated 3 weeks ago
- Detect common NFS server misconfigurations☆111Feb 4, 2026Updated 8 months ago
- A PoC for the dMSA Active Directory Domain Takeover deemed BadSuccessor☆60Mar 6, 2026Updated 7 months ago
- Code and instructions for building a custom plugin backdoor for SonarQube☆15Nov 13, 2020Updated 5 years ago
- KrbRoastParser is a tool for parsing Kerberos packets from pcap files to extract AS-REQ, AS-REP and TGS-REP hashes☆114Aug 23, 2026Updated last month
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Python and BOF utilites to the determine EPA enforcement levels of popular NTLM relay targets from the offensive perspective☆193May 31, 2026Updated 4 months ago
- Powerview on steroids☆1,010Updated this week
- The DCERPC only printerbug.py version☆233Oct 30, 2025Updated 11 months ago
- Bloodhound alternative - simple ingestor. It generates low-level commands to exploit the AD easily and automatically: learn and control e…☆88Apr 26, 2026Updated 5 months ago
- a minimalistic winrm client written in python☆50Apr 17, 2026Updated 5 months ago
- Windows File Explorer Spoofing Vulnerability (CVE-2025-24071)☆34Mar 27, 2025Updated last year
- Automating the MITM attack on WSUS☆414Updated this week
- Kerberoast with ACL abuse capabilities☆690Dec 16, 2024Updated last year
- Windows Privilege Escalation☆25Jun 7, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Active Directory data ingestor for BloodHound Community Edition written in Rust. 🦀☆608Updated this week
- PowerShell Script to automatically abuse the BadSuccessor vulnerability (CVE-2025-53779)☆47Jun 15, 2026Updated 3 months ago
- SharpSuccessor is a .NET Proof of Concept (POC) for fully weaponizing Yuval Gordon’s (@YuG0rd) BadSuccessor attack from Akamai.☆433Sep 26, 2025Updated last year
- PowerShell toolkit that extracts locked Windows files (SAM, SYSTEM, NTDS, ...) using MFT parsing and raw disk reads☆256Oct 30, 2025Updated 11 months ago
- ☆25Sep 6, 2025Updated last year
- Dump TGTs remotely and convert Windows' klist binary output to ccache.☆105Aug 6, 2026Updated 2 months ago
- GPOAnalyzer is a tool designed to assist in parsing domain Group Policy Object (GPO) files located in the SYSVOL directory.☆28Jun 14, 2024Updated 2 years ago
- Multiplayer pivoting solution☆535Apr 29, 2026Updated 5 months ago
- RPC to WebClient startup☆61Aug 19, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- PowerShell implementation for AD CS☆162Jul 30, 2026Updated 2 months ago
- ☆27Dec 31, 2025Updated 9 months ago
- ☆129Dec 13, 2019Updated 6 years ago
- A small set of Beacon Object Files (BOFs) that I developed over the time with a Magic: The Gathering theme.☆22Jul 15, 2025Updated last year
- Cobalt Strike BOF used to perform privilege escalation by exploiting the SeImpersonate privilege. Based on the original GodPotato PoC by …☆281Apr 16, 2026Updated 5 months ago
- CVE-2025-24071: NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File☆409Mar 20, 2025Updated last year
- PoC Exploit for the NTLM reflection SMB flaw.☆719Feb 18, 2026Updated 7 months ago
- Exploits a flaw in Remote Desktop Plus by monitoring and decrypting temporary .rdp files in %localappdata%/Temp, revealing credentials us…☆18Jul 3, 2025Updated last year
- KslDump — Why bring your own knife when Defender already left one in the kitchen?☆416Apr 13, 2026Updated 5 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Transform LDAP filters, BaseDNs, attribute lists, and attribute entries using composable middleware chains. Zero dependencies. Works as a…☆44Apr 13, 2026Updated 5 months ago
- Free Active Directory pentesting tool for Linux, macOS and Windows. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, passwor…☆755Sep 30, 2026Updated last week
- Modular User-Defined Reflective Loader (UDRL) built on Crystal Palace for controlled DLL execution and evasion research.☆35Apr 14, 2026Updated 5 months ago
- ☆18Mar 23, 2026Updated 6 months ago
- Windows remote execution multitool☆815Mar 25, 2026Updated 6 months ago
- SCEP request tool for AD CS and Intune☆78Oct 24, 2025Updated 11 months ago
- Group Policy Objects manipulation and exploitation framework☆319Aug 28, 2026Updated last month