Alternatives and similar repositories for Pass-to-hash-EWS

Users that are interested in Pass-to-hash-EWS are comparing it to the libraries listed below

• b4rtik / SharpAdidnsdump

  View on GitHub
  c# implementation of Active Directory Integrated DNS dumping (authenticated user)
  ☆205May 25, 2021Updated 4 years ago
• b0bac / GetMail

  View on GitHub
  利用NTLM Hash读取Exchange邮件
  ☆441Jan 7, 2025Updated last year
• zcgonvh / CVE-2020-17144

  View on GitHub
  weaponized tool for CVE-2020-17144
  ☆159Dec 9, 2020Updated 5 years ago
• zcgonvh / CVE-2020-0688

  View on GitHub
  Exploit and detect tools for CVE-2020-0688
  ☆356Mar 21, 2020Updated 5 years ago
• Ridter / SharpAddDomainMachine

  View on GitHub
  SharpAddDomainMachine
  ☆69Oct 12, 2021Updated 4 years ago
• SweetIceLolly / Huorong_Vulnerabilities

  View on GitHub
  Huorong Internet Security vulnerabilities 火绒安全软件漏洞
  ☆112Apr 2, 2020Updated 5 years ago
• n0thing0x01 / session_enum

  View on GitHub
  通过NetSessionEnum获取域内机器对应用户
  ☆67May 6, 2020Updated 5 years ago
• grayddq / EBurst

  View on GitHub
  这个脚本主要提供对Exchange邮件服务器的账户爆破功能，集成了现有主流接口的爆破方式。
  ☆339May 22, 2023Updated 2 years ago
• Lexus89 / SharpPack

  View on GitHub
  A collection of C# tools for various purposes (kerberoasting, tickets, mimikatz, privesc, domain enumeration and more)
  ☆80Aug 12, 2019Updated 6 years ago
• Ridter / cs_custom_404

  View on GitHub
  Cobalt strike custom 404 page
  ☆66Apr 5, 2020Updated 5 years ago
• mindspoof / MSSQL-Fileless-Rootkit-WarSQLKit

  View on GitHub
  WarSQLKit is a fileless rootkit and attack tool I developed for MS-SQL. With this tool you can rootkit the SQL service that uses CLR on M…
  ☆262Dec 19, 2023Updated 2 years ago
• zcgonvh / TaskSchedulerMisc

  View on GitHub
  Misc TaskScheduler Plays
  ☆239Sep 27, 2022Updated 3 years ago
• dev-2null / ADIDNSRecords

  View on GitHub
  Alternative C# Implementation tool to retrieve Active Directory Integrated DNS records with IP addresses
  ☆50Aug 8, 2020Updated 5 years ago
• zcgonvh / POPFuckProxy

  View on GitHub
  POP3 MITM example
  ☆27Dec 12, 2019Updated 6 years ago
• Ridter / CVE-2019-1040-dcpwn

  View on GitHub
  CVE-2019-1040 with Kerberos delegation
  ☆33Jun 18, 2021Updated 4 years ago
• mabangde / mimiremote

  View on GitHub
  ☆28Mar 26, 2020Updated 5 years ago
• evilashz / SharpADUserIP

  View on GitHub
  提取DC日志，快速获取域用户对应IP地址
  ☆308Mar 21, 2022Updated 3 years ago
• hosch3n / ProxyVulns

  View on GitHub
  [ProxyLogon] CVE-2021-26855 & CVE-2021-27065 Fixed RawIdentity Bug Exploit. [ProxyOracle] CVE-2021-31195 & CVE-2021-31196 Exploit Chains.…
  ☆178Oct 21, 2022Updated 3 years ago
• Veraxy00 / Jumpserver-EXP

  View on GitHub
  JumpServer远程代码执行漏洞检测利用脚本
  ☆202Feb 9, 2021Updated 5 years ago
• JamesCooteUK / SharpSphere

  View on GitHub
  .NET Project for Attacking vCenter
  ☆553Nov 11, 2021Updated 4 years ago
• 1ight-2020 / GoRottenTomato

  View on GitHub
  Go实现部分Rubeus功能，可执行asktgt, asktgs, s4u, describe ticket, renew ticket, asreproast等
  ☆142May 5, 2022Updated 3 years ago
• evi1ox / MSSQL_BackDoor

  View on GitHub
  ☆159Aug 4, 2020Updated 5 years ago
• Flangvik / SharpProxyLogon

  View on GitHub
  C# POC for CVE-2021-26855 aka ProxyLogon, supports the classically semi-interactive web shell as well as shellcode injection
  ☆252Mar 31, 2021Updated 4 years ago
• zcgonvh / SSMSPwd

  View on GitHub
  SQL Server Management Studio(SSMS) saved password dumper
  ☆117Jul 22, 2022Updated 3 years ago
• uknowsec / loginlog_windows

  View on GitHub
  读取登录过本机的登录失败或登录成功的所有计算机信息，在内网渗透中快速定位运维管理人员。
  ☆221Sep 30, 2019Updated 6 years ago
• lufeirider / BypassShell

  View on GitHub
  anti AV
  ☆293Mar 12, 2020Updated 5 years ago
• Ridter / RelayX

  View on GitHub
  NTLM relay test.
  ☆195Jun 26, 2025Updated 7 months ago
• RcoIl / CSharp-Tools

  View on GitHub
  .NET C# Tools
  ☆333Jan 19, 2021Updated 5 years ago
• RicterZ / PySharpSphere

  View on GitHub
  Yet another SharpSphere
  ☆227Aug 1, 2021Updated 4 years ago
• Ridter / CVE-2019-1040

  View on GitHub
  CVE-2019-1040 with Exchange
  ☆253Jun 18, 2021Updated 4 years ago
• RowTeam / SharpBoxUpload

  View on GitHub
  C# 编写的用于 Dropbox 文件上传
  ☆20Jan 16, 2022Updated 4 years ago
• r00tuser111 / ActuatorExploitTools

  View on GitHub
  一款用于攻击spring boot actuator的集成环境，目前集成三种攻击方式，支持1.x、2.x
  ☆86Jul 26, 2021Updated 4 years ago
• scanfsec / AggressorCNA

  View on GitHub
  Cobalt Strike Aggressor Scripts
  ☆70Dec 7, 2019Updated 6 years ago
• NS-Sp4ce / Vm4J

  View on GitHub
  A tool for detect&exploit vmware product log4j(cve-2021-44228) vulnerability.Support VMware HCX/vCenter/NSX/Horizon/vRealize Operations M…
  ☆210Jan 24, 2022Updated 4 years ago
• Ch1ngg / WebLogicPasswordDecryptorUi

  View on GitHub
  解密weblogic AES或DES加密方法
  ☆232Dec 3, 2020Updated 5 years ago
• Jumbo-WJB / Exchange_SSRF

  View on GitHub
  Some Attacks of Exchange SSRF ProxyLogon&ProxyShell
  ☆166Oct 12, 2021Updated 4 years ago
• uknowsec / SauronEye-Modify

  View on GitHub
  在原项目上加上将找到的文件压缩打包上传oss,另外做了部分小修改。
  ☆30Oct 23, 2020Updated 5 years ago
• r35tart / RedisWriteFile

  View on GitHub
  通过 Redis 主从写出无损文件
  ☆719May 25, 2020Updated 5 years ago
• hayasec / 360SafeBrowsergetpass

  View on GitHub
  这是一个一键辅助抓取360安全浏览器密码的CobaltStrike脚本以及解密小工具，用于节省红队工作量，通过下载浏览器数据库、记录密钥来离线解密浏览器密码。
  ☆638Apr 4, 2021Updated 4 years ago