Alternatives and similar repositories for PowerExtract:

Users that are interested in PowerExtract are comparing it to the libraries listed below

• SpecterOps / cred1py
  A Python POC for CRED1 over SOCKS5
  ☆148Updated 7 months ago
• mandiant / ccmpwn
  ☆202Updated last year
• improsec / BackupOperatorToolkit
  The BackupOperatorToolkit contains different techniques allowing you to escalate from Backup Operator to Domain Admin
  ☆174Updated 2 years ago
• synacktiv / OUned
  The OUned project automating Active Directory Organizational Units ACL exploitation through gPLink poisoning
  ☆112Updated last month
• Offensive-Panda / LsassReflectDumping
  This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…
  ☆198Updated 6 months ago
• mertdas / SharpLateral
  Lateral Movement
  ☆123Updated last year
• G0ldenGunSec / GetWebDAVStatus
  Determine if the WebClient Service (WebDAV) is running on a remote system
  ☆137Updated last year
• HuskyHacks / SharpTokenFinder
  C# implementation of TokenFinder. Steal M365 access tokens from Office Desktop apps
  ☆139Updated 9 months ago
• BC-SECURITY / IronSharpPack
  IronSharpPack is a repo of popular C# projects that have been embedded into IronPython scripts that execute an AMSI bypass and then refle…
  ☆115Updated last year
• daem0nc0re / Abusing_Weak_ACL_on_Certificate_Templates
  Investigation about ACL abusing for Active Directory Certificate Services (AD CS)
  ☆122Updated 3 years ago
• ad0nis / ntlm_relay_gat
  ☆157Updated last year
• csandker / pxethiefy
  ☆56Updated 3 months ago
• gsmith257-cyber / better-sliver
  Adversary Emulation Framework
  ☆98Updated 9 months ago
• sevagas / Advanced_Initial_access_in_2024_OffensiveX
  Resources linked to my presentation at OffensiveX in Athens in June 2024 on the topic "Breach the Gat, Advanced Initial Access in 2024"
  ☆138Updated 8 months ago
• coffeegist / bofhound
  Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel
  ☆206Updated this week
• nettitude / ETWHash
  C# POC to extract NetNTLMv1/v2 hashes from ETW provider
  ☆256Updated last year
• t94j0 / adexplorersnapshot-rs
  ☆80Updated 9 months ago
• EvilBytecode / Lifetime-Amsi-EtwPatch
  Two in one, patch lifetime powershell console, no more etw and amsi!
  ☆88Updated last week
• garrettfoster13 / aced
  ☆159Updated 5 months ago
• dadevel / mssql-spider
  Automated exploitation of MSSQL servers at scale
  ☆108Updated last week
• bitsadmin / lofl
  Living Off the Foreign Land setup scripts
  ☆67Updated 2 months ago
• Diverto / IPPrintC2
  PoC for using MS Windows printers for persistence / command and control via Internet Printing
  ☆148Updated last year
• danti1988 / adcshunter
  Uses rpcdump to locate the ADCS server, and identify if ESC8 is vulnerable from unauthenticated perspective.
  ☆80Updated 7 months ago
• zblurx / acltoolkit
  ACL abuse swiss-knife
  ☆123Updated 2 years ago
• skelsec / pysnaffler
  pysnaffler
  ☆91Updated last month
• decoder-it / KrbRelayEx-RPC
  ☆179Updated last month
• xforcered / RemoteMonologue
  Weaponizing DCOM for NTLM Authentication Coercions
  ☆211Updated 3 weeks ago
• decoder-it / KrbRelay-SMBServer
  ☆217Updated 6 months ago
• zyn3rgy / smbtakeover
  BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions
  ☆300Updated 5 months ago
• almandin / krbjack
  A Kerberos AP-REQ hijacking tool with DNS unsecure updates abuse.
  ☆115Updated 3 months ago