padovah4ck / PSByPassCLM

Related projects ⓘ

Alternatives and complementary repositories for PSByPassCLM

• NotMedic / NetNTLMtoSilverTicket
  SpoolSample -> Responder w/NetNTLM Downgrade -> NetNTLMv1 -> NTLM -> Kerberos Silver Ticket
  ☆763Updated 3 years ago
• FuzzySecurity / StandIn
  StandIn is a small .NET35/45 AD post-exploitation toolkit
  ☆703Updated 11 months ago
• S3cur3Th1sSh1t / Invoke-SharpLoader
  ☆349Updated 3 years ago
• N7WEra / SharpAllTheThings
  The idea is to collect all the C# projects that are Sharp{Word} that can be used in Cobalt Strike as execute assembly command.
  ☆466Updated 2 years ago
• tothi / rbcd-attack
  Kerberos Resource-Based Constrained Delegation Attack from Outside using Impacket
  ☆496Updated 2 years ago
• mdsecactivebreach / Farmer
  ☆350Updated 3 years ago
• giuliano108 / SeBackupPrivilege
  Use SE_BACKUP_NAME/SeBackupPrivilege to access objects you shouldn't have access to
  ☆290Updated 11 years ago
• cube0x0 / SharpSystemTriggers
  Collection of remote authentication triggers in C#
  ☆464Updated 6 months ago
• calebstewart / bypass-clm
  PowerShell Constrained Language Mode Bypass
  ☆232Updated 3 years ago
• 0xthirteen / MoveKit
  Cobalt Strike kit for Lateral Movement
  ☆647Updated 4 years ago
• tomcarver16 / ADSearch
  A tool to help query AD via the LDAP protocol
  ☆462Updated last month
• MythicAgents / Apollo
  A .NET Framework 4.0 Windows Agent
  ☆454Updated last week
• GoSecure / WSuspicious
  WSuspicious - A tool to abuse insecure WSUS connections for privilege escalations
  ☆346Updated 4 years ago
• mgeeky / Stracciatella
  OpSec-safe Powershell runspace from within C# (aka SharpPick) with AMSI, Constrained Language Mode and Script Block Logging disabled at s…
  ☆503Updated 2 years ago
• NetSPI / ESC
  Evil SQL Client (ESC) is an interactive .NET SQL console client with enhanced SQL Server discovery, access, and data exfiltration feature…
  ☆280Updated last year
• CCob / BOF.NET
  A .NET Runtime for Cobalt Strike's Beacon Object Files
  ☆679Updated 2 months ago
• Flangvik / BetterSafetyKatz
  Fork of SafetyKatz that dynamically fetches the latest pre-compiled release of Mimikatz directly from gentilkiwi GitHub repo, runtime pat…
  ☆839Updated 3 years ago
• leechristensen / SpoolSample
  PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN RPC interface. This is possible via other protocols as w…
  ☆924Updated 5 months ago
• tevora-threat / SharpView
  C# implementation of harmj0y's PowerView
  ☆1,007Updated 7 months ago
• Flangvik / AMSI.fail
  C# Azure Function with an HTTP trigger that generates obfuscated PowerShell snippets that break or disable AMSI for the current process.
  ☆376Updated 2 months ago
• xforcered / InvisibilityCloak
  Proof-of-concept obfuscation toolkit for C# post-exploitation tools
  ☆413Updated 2 years ago
• ZeroDayLab / PowerSploit
  PowerSploit - A PowerShell Post-Exploitation Framework
  ☆216Updated 2 years ago
• micahvandeusen / gMSADumper
  Lists who can read any gMSA password blobs and parses them if the current user has access.
  ☆244Updated 9 months ago
• eladshamir / Whisker
  Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, …
  ☆813Updated last week
• 0xthirteen / SharpMove
  .NET Project for performing Authenticated Remote Execution
  ☆379Updated last year
• GoSecure / pywsus
  Standalone implementation of a part of the WSUS spec. Built for offensive security purposes.
  ☆294Updated 2 years ago
• outflanknl / Spray-AD
  A Cobalt Strike tool to audit Active Directory user accounts for weak, well known or easy guessable passwords.
  ☆425Updated 2 years ago
• b4rtik / SharpKatz
  Porting of mimikatz sekurlsa::logonpasswords, sekurlsa::ekeys and lsadump::dcsync commands
  ☆975Updated 3 years ago
• rvazarkar / GMSAPasswordReader
  ☆198Updated last year
• rvrsh3ll / BOF_Collection
  Various Cobalt Strike BOFs
  ☆581Updated 2 years ago