Alternatives and similar repositories for PSByPassCLM

Users that are interested in PSByPassCLM are comparing it to the libraries listed below

• NotMedic / NetNTLMtoSilverTicket
  SpoolSample -> Responder w/NetNTLM Downgrade -> NetNTLMv1 -> NTLM -> Kerberos Silver Ticket
  ☆876Updated 3 years ago
• FuzzySecurity / StandIn
  StandIn is a small .NET35/45 AD post-exploitation toolkit
  ☆781Updated last year
• tothi / rbcd-attack
  Kerberos Resource-Based Constrained Delegation Attack from Outside using Impacket
  ☆550Updated 2 years ago
• mdsecactivebreach / Farmer
  ☆393Updated 4 years ago
• S3cur3Th1sSh1t / Invoke-SharpLoader
  ☆361Updated 4 years ago
• calebstewart / bypass-clm
  PowerShell Constrained Language Mode Bypass
  ☆272Updated 4 years ago
• GoSecure / WSuspicious
  WSuspicious - A tool to abuse insecure WSUS connections for privilege escalations
  ☆366Updated 4 years ago
• xforcered / InvisibilityCloak
  Proof-of-concept obfuscation toolkit for C# post-exploitation tools
  ☆426Updated 2 years ago
• giuliano108 / SeBackupPrivilege
  Use SE_BACKUP_NAME/SeBackupPrivilege to access objects you shouldn't have access to
  ☆369Updated 11 years ago
• Flangvik / AMSI.fail
  C# Azure Function with an HTTP trigger that generates obfuscated PowerShell snippets that break or disable AMSI for the current process.
  ☆412Updated 10 months ago
• cube0x0 / SharpSystemTriggers
  Collection of remote authentication triggers in C#
  ☆495Updated last year
• mgeeky / Stracciatella
  OpSec-safe Powershell runspace from within C# (aka SharpPick) with AMSI, Constrained Language Mode and Script Block Logging disabled at s…
  ☆527Updated 2 years ago
• Inf0secRabbit / BadAssMacros
  BadAssMacros - C# based automated Malicous Macro Generator.
  ☆425Updated 3 years ago
• tomcarver16 / ADSearch
  A tool to help query AD via the LDAP protocol
  ☆560Updated 9 months ago
• rasta-mouse / AmsiScanBufferBypass
  Bypass AMSI by patching AmsiScanBuffer
  ☆268Updated 4 years ago
• eladshamir / Whisker
  Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, …
  ☆897Updated 8 months ago
• micahvandeusen / gMSADumper
  Lists who can read any gMSA password blobs and parses them if the current user has access.
  ☆310Updated last year
• Flangvik / BetterSafetyKatz
  Fork of SafetyKatz that dynamically fetches the latest pre-compiled release of Mimikatz directly from gentilkiwi GitHub repo, runtime pat…
  ☆866Updated 4 years ago
• rvazarkar / GMSAPasswordReader
  ☆227Updated 2 years ago
• ZeroDayLab / PowerSploit
  PowerSploit - A PowerShell Post-Exploitation Framework
  ☆234Updated 3 years ago
• N7WEra / SharpAllTheThings
  The idea is to collect all the C# projects that are Sharp{Word} that can be used in Cobalt Strike as execute assembly command.
  ☆480Updated 3 years ago
• MythicAgents / Apollo
  A .NET Framework 4.0 Windows Agent
  ☆488Updated this week
• n00py / LAPSDumper
  Dumping LAPS from Python
  ☆274Updated 2 years ago
• mandiant / ADFSDump
  ☆358Updated last year
• decoder-it / psgetsystem
  getsystem via parent process using ps1 & embeded c#
  ☆421Updated last year
• S3cur3Th1sSh1t / SharpImpersonation
  A User Impersonation tool - via Token or Shellcode injection
  ☆416Updated 3 years ago
• ropnop / go-windapsearch
  Utility to enumerate users, groups and computers from a Windows domain through LDAP queries
  ☆384Updated 4 years ago
• GoSecure / pywsus
  Standalone implementation of a part of the WSUS spec. Built for offensive security purposes.
  ☆318Updated 2 years ago
• 0xthirteen / SharpMove
  .NET Project for performing Authenticated Remote Execution
  ☆400Updated 2 years ago
• 0xthirteen / MoveKit
  Cobalt Strike kit for Lateral Movement
  ☆672Updated 5 years ago