Alternatives and similar repositories for NTLMRecon

Users that are interested in NTLMRecon are comparing it to the libraries listed below

• GoSecure / ldap-scanner
  Checks for signature requirements over LDAP
  ☆97Updated 2 years ago
• blurbdust / ldd2bh
  Convert ldapdomaindump to Bloodhound
  ☆80Updated last year
• horizon3ai / backup_dc_registry
  A simple POC that abuses Backup Operator privileges to remote dump SAM, SYSTEM, and SECURITY
  ☆83Updated 3 years ago
• EncodeGroup / Gopher
  C# tool to discover low hanging fruits
  ☆93Updated 2 years ago
• laxa / SharpSecretsdump
  Secretsdump C# version only supporting local (live) operation
  ☆49Updated 3 weeks ago
• Qazeer / OffensivePythonPipeline
  Static standalone binaries for Linux and Windows (x64) of Python offensive tools. Compiled using PyInstaller, Docker for Windows, WSL2, a…
  ☆101Updated 2 years ago
• praetorian-inc / ADFSRelay
  Proof of Concept Utilities Developed to Research NTLM Relaying Attacks Targeting ADFS
  ☆184Updated 2 years ago
• RayRRT / Active-Directory-Certificate-Services-abuse
  ☆49Updated 2 years ago
• n00py / GetFGPP
  Get Fine Grained Password Policy
  ☆70Updated 3 weeks ago
• n00py / DCSync
  DCSync Attack from Outside using Impacket
  ☆113Updated 3 years ago
• G0ldenGunSec / GetWebDAVStatus
  Determine if the WebClient Service (WebDAV) is running on a remote system
  ☆137Updated last year
• LuemmelSec / ntlmrelayx.py_to_exe
  ☆86Updated last year
• SolomonSklash / RubeusToCcache
  A small tool to convert Base64-encoded .kirbi tickets from Rubeus into .ccache files for Impacket
  ☆55Updated 4 years ago
• snovvcrash / OffensivePipeline
  OffensivePipeline allows to download, compile (without Visual Studio) and obfuscate C# tools for Red Team exercises.
  ☆91Updated 3 years ago
• bashexplode / cs2webconfig
  Convert Cobalt Strike profiles to IIS web.config files
  ☆112Updated 3 years ago
• optiv / KnockKnock
  Enumerate valid users within Microsoft Teams and OneDrive with clean output.
  ☆58Updated 3 months ago
• AssuranceMaladieSec / AD-description-password-finder
  Retrieve AD accounts description and search for password in it
  ☆83Updated 2 years ago
• bitsadmin / dir2json
  Tool for efficient directory enumeration
  ☆56Updated 6 months ago
• sdcampbell / nmapurls
  Nmapurls parses Nmap xml reports from either piped input or command line arg and outputs a list of http(s) URL's to be used in an automat…
  ☆41Updated last year
• eversinc33 / SharpStartWebclient
  Programmatically start WebClient from an unprivileged session to enable that juicy privesc.
  ☆74Updated 2 years ago
• improsec / BackupOperatorToolkit
  The BackupOperatorToolkit contains different techniques allowing you to escalate from Backup Operator to Domain Admin
  ☆174Updated 2 years ago
• sfewer-r7 / CVE-2023-27532
  Exploit for CVE-2023-27532 against Veeam Backup & Replication
  ☆110Updated 2 years ago
• sfewer-r7 / CVE-2023-34362
  CVE-2023-34362: MOVEit Transfer Unauthenticated RCE
  ☆64Updated last year
• rootSySdk / PowerGPOAbuse
  Powershell version of SharpGPOAbuse
  ☆75Updated 3 years ago
• blacklanternsecurity / dp_cryptomg
  Another tool for exploiting CVE-2017-9248, a cryptographic weakness in Telerik UI for ASP.NET AJAX dialog handler.
  ☆50Updated 8 months ago
• He-No / ntlmrelayx2proxychains
  ☆92Updated 2 years ago
• horizon3ai / CVE-2023-27532
  POC for Veeam Backup and Replication CVE-2023-27532
  ☆63Updated 2 years ago
• optionalCTF / SSOh-No
  User enumeration and password spraying tool for testing Azure AD
  ☆69Updated 3 years ago
• LudovicPatho / CVE-2022-26923_AD-Certificate-Services
  The vulnerability allowed a low-privileged user to escalate privileges to domain administrator in a default Active Directory environment …
  ☆44Updated 2 years ago
• Tw1sm / impacket
  Impacket is a collection of Python classes for working with network protocols.
  ☆18Updated 6 months ago