Alternatives and similar repositories for AccountShadowTakeover:

Users that are interested in AccountShadowTakeover are comparing it to the libraries listed below

• p0dalirius / http-fuzzing-scripts
  A collection of http fuzzing python scripts to fuzz HTTP servers for bugs.
  ☆15Updated last year
• p0dalirius / FindAzureDomainTenant
  A Python script to find tenant id an region from a list of domain names.
  ☆14Updated last month
• p0dalirius / MSRPRN-Coerce
  A python script to force authentication using MS-RPRN RemoteFindFirstPrinterChangeNotificationEx function (opnum 65).
  ☆21Updated last month
• p0dalirius / CVE-2022-26159-Ametys-Autocompletion-XML
  A python exploit to automatically dump all the data stored by the auto-completion plugin of Ametys CMS to a local sqlite database file.
  ☆12Updated 2 years ago
• p0dalirius / Sprayer
  Multithreaded spraying of a password on all accounts of a domain.
  ☆19Updated last month
• p0dalirius / LimeSurvey-webshell-plugin
  A webshell plugin and interactive shell for pentesting a LimeSurvey application.
  ☆17Updated 4 months ago
• Vozec / CVE-2023-22527
  This repository presents a proof-of-concept of CVE-2023-22527
  ☆12Updated last year
• p0dalirius / msFlagsDecoder
  Decode the values of common Windows properties such as userAccountControl and sAMAccountType.
  ☆21Updated last year
• p0dalirius / TargetAllDomainObjects
  A python wrapper to run a command on against all users/computers/DCs of a Windows Domain
  ☆28Updated 2 years ago
• p0dalirius / crawlersuseragents
  Python script to check if there is any differences in responses of an application when the request comes from a search engine's crawler.
  ☆21Updated last year
• p0dalirius / CVE-2022-30780-lighttpd-denial-of-service
  CVE-2022-30780 - lighttpd remote denial of service
  ☆16Updated last year
• p0dalirius / CodeIgniter-session-unsign
  Command line tool to fetch, decode and brute-force CodeIgniter session cookies by guessing and bruteforcing secret keys.
  ☆12Updated last month
• riramar / SmuggleTP
  A straightforward tool for exploiting SMTP Smuggling vulnerabilities.
  ☆14Updated 8 months ago
• p0dalirius / pyLootApacheServerStatus
  A script to automatically dump all URLs present in /server-status to a file locally.
  ☆23Updated last month
• p0dalirius / GhostSPN
  List accounts with Service Principal Names (SPN) not linked to active dns records in an Active Directory Domain.
  ☆17Updated last month
• p0dalirius / CVE-2016-10956-mail-masta
  MailMasta wordpress plugin Local File Inclusion vulnerability (CVE-2016-10956)
  ☆16Updated 2 years ago
• p0dalirius / sectools
  A Python native library containing lots of useful functions to write efficient scripts to hack stuff.
  ☆33Updated last month
• p0dalirius / mercurial-scm-extract
  A tool to extract and dump files of mercurial SCM exposed on a web server.
  ☆10Updated last month
• horizon3ai / CVE-2024-9465
  Proof of Concept Exploit for CVE-2024-9465
  ☆29Updated 5 months ago
• p0dalirius / SortWindowsISOs
  Extract the windows major and minor build numbers from an ISO file, and automatically sort the iso files.
  ☆14Updated 5 months ago
• p0dalirius / factorizator
  A script to factorize integers with sagemath and factordb.
  ☆11Updated last month
• p0dalirius / Hashes-Harvester
  Automatically extracts NT and LM hashes from Windows memory dumps based on volatility.
  ☆24Updated last year
• HackingLZ / TomcatBackdoorPoC
  Tomcat backdoor based on CS blog
  ☆27Updated last year
• p0dalirius / RobotsValidator
  A python script to check if URLs are allowed or disallowed by a robots.txt file.
  ☆21Updated last month
• jfjallid / go-lsass
  Tool to aid in dumping LSASS process remotely
  ☆38Updated 7 months ago
• p0dalirius / pwndocapi
  A python library to interact with Pwndoc instances for pentest reports generation
  ☆16Updated last month
• mdsecactivebreach / PleasantTools
  Tools for Attacking Pleasant Password Server
  ☆21Updated last year
• p0dalirius / DomainUsersToXLSX
  Extract all users from an Active Directory domain to an Excel worksheet.
  ☆32Updated last month
• p0dalirius / JoGet-webshell-plugin
  A webshell plugin and interactive shell for pentesting JoGet application.
  ☆12Updated 2 years ago
• d3lb3 / KeePass-the-Hash
  A script that greps composite key-like strings from a KeePassXC process dump, then uses a customized version of pykeepass library to unlo…
  ☆32Updated 2 years ago