A tool for performing light brute-forcing of HTTP servers to identify commonly accessible NTLM authentication endpoints.
☆116Mar 31, 2026Updated 7 months ago
Alternatives and similar repositories for NTLMRecon
Users that are interested in NTLMRecon are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Proof of Concept Utilities Developed to Research NTLM Relaying Attacks Targeting ADFS☆190Jun 22, 2022Updated 4 years ago
- Allows extraction of the Global Address List (GAL) in OWA (Outlook Web Access)☆14Jun 17, 2021Updated 5 years ago
- scan for NTLM directories☆396Aug 13, 2025Updated last year
- Enumerate information from NTLM authentication enabled web endpoints 🔎☆510Sep 23, 2025Updated last year
- ☆40Sep 25, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆507Nov 20, 2022Updated 3 years ago
- Proof-of-concept tools for my AD Forest trust research☆242Jun 10, 2024Updated 2 years ago
- ☆200Mar 28, 2025Updated last year
- C# POC to extract NetNTLMv1/v2 hashes from ETW provider☆260May 10, 2023Updated 3 years ago
- A C# utility for interacting with SCCM☆707Sep 29, 2026Updated last month
- Your MitM sidekick for relaying attacks featuring DHCPv6 DNS takeover as well as mDNS, LLMNR and NetBIOS-NS spoofing.☆1,329Jul 3, 2026Updated 3 months ago
- SpoolSample -> Responder w/NetNTLM Downgrade -> NetNTLMv1 -> NTLM -> Kerberos Silver Ticket☆984Jul 26, 2021Updated 5 years ago
- Python implementation for PetitPotam☆226Oct 17, 2021Updated 5 years ago
- A python script to force authentication using MS-RPRN RemoteFindFirstPrinterChangeNotificationEx function (opnum 65).☆31Feb 11, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆853Sep 9, 2022Updated 4 years ago
- Check for LDAP protections regarding the relay of NTLM authentication☆532Nov 19, 2024Updated last year
- SCCMSecrets.py aims at exploiting SCCM policies distribution for credentials harvesting, initial access and lateral movement.☆283Aug 30, 2026Updated 2 months ago
- An ADCS Exploitation Automation Tool Weaponizing Certipy and Coercer☆750May 19, 2023Updated 3 years ago
- DavRelayUp - a universal no-fix local privilege escalation in domain-joined windows workstations where LDAP signing is not enforced (the …☆582Jun 5, 2023Updated 3 years ago
- A proof-of-concept tool that attempts to retrieve the configuration from the memory dump of an F-Secure C3 Relay executable.☆16Jul 2, 2021Updated 5 years ago
- Decrypt Veeam database passwords☆223Dec 8, 2025Updated 10 months ago
- Active Directory Integrated DNS dumping by any authenticated user☆1,204Oct 24, 2026Updated last week
- A tool to automatically create Edges for BloodHound☆10Feb 17, 2023Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Ask a TGS on behalf of another user without password☆479Mar 30, 2025Updated last year
- ADCS abuser☆325Feb 6, 2023Updated 3 years ago
- Dump NTDS with golden certificates and UnPAC the hash☆648Mar 20, 2024Updated 2 years ago
- .NET/PowerShell/VBA Offensive Security Obfuscator☆527Feb 1, 2024Updated 2 years ago
- A simple to use single-include Windows API resolver☆22Jul 9, 2024Updated 2 years ago
- Get or remove RunMRU values☆62Dec 11, 2019Updated 6 years ago
- A tool to query for the existence of pre-windows 2000 computer objects.☆399Updated this week
- GolenGMSA tool for working with GMSA passwords☆191May 14, 2026Updated 5 months ago
- MS-FSRVP coercion abuse PoC☆304Dec 30, 2021Updated 4 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Python script to enumerate valid Microsoft 365 domains, retrieve tenant name, and check for an MDI instance.☆224Nov 13, 2024Updated last year
- PXEThief is a set of tooling that can extract passwords from the Operating System Deployment functionality in Microsoft Endpoint Configur…☆438May 29, 2024Updated 2 years ago
- ☆113Jun 9, 2026Updated 4 months ago
- The GPOddity project, aiming at automating GPO attack vectors through NTLM relaying (and more).☆384Aug 28, 2026Updated 2 months ago
- ☆47Nov 5, 2018Updated 7 years ago
- My implementation of the GIUDA project in C++☆189Jul 25, 2023Updated 3 years ago
- ☆166May 5, 2025Updated last year