Alternatives and similar repositories for ShareHound

Users that are interested in ShareHound are comparing it to the libraries listed below

• andrecrafts / Bloodhound-query-legacy2ce
  A Python based tool to convert custom queries from Legacy BloodHound to BloodHound CE format, with the option to directly upload them to …
  ☆31Updated last month
• cybrly / badsuccessor
  ☆114Updated 5 months ago
• RePRGM / Nimperiments
  Various one-off pentesting projects written in Nim. Updates happen on a whim.
  ☆160Updated 3 months ago
• logangoins / SOAPy
  SOAPy is a Proof of Concept (PoC) tool for conducting offensive interaction with Active Directory Web Services (ADWS) from Linux hosts.
  ☆145Updated 3 months ago
• RedSiege / Chromatophore
  Utilities for obfuscating shellcode
  ☆94Updated last month
• vysecurity / ExfilServer
  Client-side Encrypted Upload Server Python Script
  ☆64Updated 3 months ago
• cisagov / snafflepy
  Snaffler reimplementation in Python - https://github.com/SnaffCon/Snaffler
  ☆112Updated 3 months ago
• 1r0BIT / TaskHound
  Tool to enumerate privileged Scheduled Tasks on Remote Systems
  ☆86Updated last week
• SenSecurity / Founding
  Founding is a generator that will create a loader encrypted or obfuscated with different execution types
  ☆95Updated 2 months ago
• Flangvik / QRucible
  Python utility that generates "imageless" QR codes in various formats
  ☆130Updated last year
• synacktiv / ntdissector
  ☆160Updated 4 months ago
• Leo4j / Invoke-SMBRemoting
  Interactive Shell and Command Execution over Named-Pipes (SMB) for Fileless lateral movement
  ☆177Updated 5 months ago
• xforcered / RemoteMonologue
  Weaponizing DCOM for NTLM Authentication Coercions
  ☆268Updated 4 months ago
• badsectorlabs / sccm-http-looter
  Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) shares via HTTP(s)
  ☆197Updated last year
• skelsec / pysnaffler
  pysnaffler
  ☆104Updated 2 months ago
• zh54321 / SnafflerParser
  Parses Snaffler output file and generate beautified outputs.
  ☆108Updated 9 months ago
• t3l3machus / ACEshark
  ACEshark is a utility designed for rapid extraction and analysis of Windows service configurations and Access Control Entries, eliminatin…
  ☆117Updated 9 months ago
• Thunter-HackTeam / EvilentCoerce
  ☆148Updated 5 months ago
• LuemmelSec / APEX
  Azure Post Exploitation Framework
  ☆240Updated last month
• amjcyber / pwnlook
  An offensive postexploitation tool that will give you complete control over the Outlook desktop application and therefore to the emails c…
  ☆166Updated last year
• safedv / RustSoliloquy
  A Rust implementation of Internal-Monologue — retrieving NetNTLM hashes without touching LSASS, leveraging SSPI for NTLM negotiation and …
  ☆166Updated 6 months ago
• SpecterOps / cred1py
  A Python POC for CRED1 over SOCKS5
  ☆158Updated last year
• yo-yo-yo-jbo / dumping_lsass
  The different ways to dump lsass
  ☆193Updated 2 months ago
• yehia-mamdouh / ZeroProbe
  ZeroProbe is an advanced enumeration and analysis framework designed for exploit developers, security researchers, and red teamers. It pr…
  ☆107Updated 7 months ago
• Shac0x / Wonka
  Wonka is a sweet Windows tool that extracts Kerberos tickets from the Local Security Authority (LSA) cache. Like finding a ticket, but fo…
  ☆98Updated last week
• Fudgedotdotdot / dump_kerberos_tickets
  Dump Kerberos tickets
  ☆42Updated 2 months ago
• temp43487580 / EntraPassTheCert
  tool for requesting Entra ID's P2P certificate and authenticating to a remote Entra joinned devices with it
  ☆124Updated 2 months ago
• synacktiv / GroupPolicyBackdoor
  Group Policy Objects manipulation and exploitation framework
  ☆264Updated 3 weeks ago
• RedTeamPentesting / keycred
  Generate and Manage KeyCredentialLinks
  ☆174Updated 3 weeks ago
• x0xr00t / sl0ppy-PrivescTaskCreator
  sl0ppy-PrivescTaskCreator.ps1
  ☆37Updated 3 weeks ago