Alternatives and similar repositories for MSRPRN-Coerce

Users that are interested in MSRPRN-Coerce are comparing it to the libraries listed below

• synacktiv / CVE-2024-43468
  ☆94Updated 11 months ago
• synacktiv / OUned
  The OUned project automating Active Directory Organizational Units ACL exploitation through gPLink poisoning
  ☆154Updated 2 months ago
• almandin / krbjack
  A Kerberos AP-REQ hijacking tool with DNS unsecure updates abuse.
  ☆134Updated 11 months ago
• exploide / bhcli
  CLI tool to interact with the BloodHound CE API
  ☆64Updated 3 weeks ago
• GeisericII / Winpacket
  Impacket pre-compiled binaries
  ☆18Updated 2 years ago
• csandker / pxethiefy
  ☆79Updated 11 months ago
• Thunter-HackTeam / EvilentCoerce
  ☆155Updated 8 months ago
• cisagov / snafflepy
  Snaffler reimplementation in Python - https://github.com/SnaffCon/Snaffler
  ☆116Updated 5 months ago
• OleFredrik1 / remoteKrbRelayx
  A tool for coercing and relaying Kerberos authentication over DCOM and RPC.
  ☆146Updated 5 months ago
• decoder-it / printerbugnew
  The DCERPC only printerbug.py version
  ☆186Updated 2 months ago
• synacktiv / Prox-Ez
  ☆101Updated 11 months ago
• powerseb / PowerExtract
  ☆120Updated 9 months ago
• p0dalirius / crEAP
  crEAP will identify WPA Enterprise mode EAP types and harvest usernames and/or handshakes if insecure protocols are in use.
  ☆30Updated 3 years ago
• danti1988 / adcshunter
  Uses rpcdump to locate the ADCS server, and identify if ESC8 is vulnerable from unauthenticated perspective.
  ☆82Updated last year
• 7hePr0fess0r / ADCSDevilCOM
  A C# tool for requesting certificates from ADCS using DCOM over SMB. This tool allows you to remotely request X.509 certificates from CA …
  ☆162Updated 2 months ago
• ghost-ng / slinger
  An impacket-lite cli tool that combines many useful impacket functions using a single session.
  ☆57Updated 3 months ago
• andrecrafts / Bloodhound-query-legacy2ce
  A Python based tool to convert custom queries from Legacy BloodHound to BloodHound CE format, with the option to directly upload them to …
  ☆34Updated 3 months ago
• decoder-it / KrbRelay-SMBServer
  ☆233Updated last year
• Yeeb1 / SharpLansweeperDecrypt
  Automatically extract and decrypt all configured scanning credentials of a Lansweeper instance.
  ☆45Updated last year
• SpecterOps / cred1py
  A Python POC for CRED1 over SOCKS5
  ☆162Updated last year
• p0dalirius / ldapconsole
  The ldapconsole script allows you to perform custom LDAP requests to a Windows domain.
  ☆64Updated 3 months ago
• p0dalirius / pyDescribeNTSecurityDescriptor
  A python tool to parse and describe the contents of a raw ntSecurityDescriptor structure.
  ☆26Updated 4 months ago
• skelsec / pysnaffler
  pysnaffler
  ☆109Updated this week
• dadevel / mssql-spider
  Automated exploitation of MSSQL servers at scale
  ☆128Updated last month
• p4p1 / havoc-privkit
  a port of privkit bof for havoc
  ☆24Updated 2 years ago
• Sh4N4C1 / sh4loader
  ☆29Updated last year
• PShlyundin / Coverage
  A Python-based tool for analyzing Active Directory security posture by processing LDAP dumps, NTDS.dit extracts, and password cracking re…
  ☆25Updated 8 months ago
• decoder-it / KrbRelayEx-RPC
  ☆198Updated 9 months ago
• xct / adopt
  Spawns a process from a process. Can sometimes be used to run a session > 0 process from session 0.
  ☆20Updated 3 years ago
• rtecCyberSec / RAITrigger
  Local SYSTEM auth trigger for relaying
  ☆168Updated 5 months ago