Alternatives and similar repositories for NTLMRecon:

Users that are interested in NTLMRecon are comparing it to the libraries listed below

• blurbdust / ldd2bh
  Convert ldapdomaindump to Bloodhound
  ☆78Updated last year
• laxa / SharpSecretsdump
  Secretsdump C# version only supporting local (live) operation
  ☆48Updated last year
• praetorian-inc / ADFSRelay
  Proof of Concept Utilities Developed to Research NTLM Relaying Attacks Targeting ADFS
  ☆174Updated 2 years ago
• GoSecure / ldap-scanner
  Checks for signature requirements over LDAP
  ☆95Updated 2 years ago
• bashexplode / cs2webconfig
  Convert Cobalt Strike profiles to IIS web.config files
  ☆112Updated 3 years ago
• LuemmelSec / ntlmrelayx.py_to_exe
  ☆77Updated last year
• optiv / KnockKnock
  Enumerate valid users within Microsoft Teams and OneDrive with clean output.
  ☆58Updated 4 months ago
• iomoath / PyExchangePasswordSpray
  Microsoft Exchange password spray tool with proxy support.
  ☆40Updated 3 years ago
• ly4k / Pypykatz
  Modified version of Pypykatz to print encrypted credentials
  ☆51Updated 2 years ago
• horizon3ai / backup_dc_registry
  A simple POC that abuses Backup Operator privileges to remote dump SAM, SYSTEM, and SECURITY
  ☆80Updated 2 years ago
• He-No / ntlmrelayx2proxychains
  ☆92Updated 2 years ago
• LudovicPatho / CVE-2022-26923_AD-Certificate-Services
  The vulnerability allowed a low-privileged user to escalate privileges to domain administrator in a default Active Directory environment …
  ☆44Updated 2 years ago
• sdcampbell / nmapurls
  Nmapurls parses Nmap xml reports from either piped input or command line arg and outputs a list of http(s) URL's to be used in an automat…
  ☆40Updated 11 months ago
• blacklanternsecurity / dp_cryptomg
  Another tool for exploiting CVE-2017-9248, a cryptographic weakness in Telerik UI for ASP.NET AJAX dialog handler.
  ☆45Updated 5 months ago
• n00py / DCSync
  DCSync Attack from Outside using Impacket
  ☆112Updated 2 years ago
• NotMedic / Invoke-Nanodump
  HelpSystems Nanodump, but wrapped in powershell via Invoke-ReflectivePEInjection
  ☆53Updated 2 years ago
• OG-Sadpanda / SharpSword
  Read the contents of MS Word Documents using Cobalt Strike's Execute-Assembly
  ☆117Updated 4 months ago
• Qazeer / OffensivePythonPipeline
  Static standalone binaries for Linux and Windows (x64) of Python offensive tools. Compiled using PyInstaller, Docker for Windows, WSL2, a…
  ☆100Updated 2 years ago
• snovvcrash / OffensivePipeline
  OffensivePipeline allows to download, compile (without Visual Studio) and obfuscate C# tools for Red Team exercises.
  ☆90Updated 2 years ago
• n00py / GetFGPP
  Get Fine Grained Password Policy
  ☆67Updated 8 months ago
• 0xe7 / RoastInTheMiddle
  ☆70Updated last year
• nyxgeek / AzureAD_Autologon_Brute
  Brute force attack tool for Azure AD Autologon/Seamless SSO - Source: https://arstechnica.com/information-technology/2021/09/new-azure-ac…
  ☆98Updated 7 months ago
• zblurx / acltoolkit
  ACL abuse swiss-knife
  ☆118Updated last year
• SolomonSklash / RubeusToCcache
  A small tool to convert Base64-encoded .kirbi tickets from Rubeus into .ccache files for Impacket
  ☆54Updated 4 years ago
• EncodeGroup / Gopher
  C# tool to discover low hanging fruits
  ☆89Updated 2 years ago
• tothi / CVE-2021-1675
  C# and Impacket implementation (here with Kerberos auth support) of PrintNightmare CVE-2021-1675/CVE-2021-34527
  ☆29Updated 3 years ago
• RedSiege / DigDug
  ☆72Updated 5 months ago
• sfewer-r7 / CVE-2023-27532
  Exploit for CVE-2023-27532 against Veeam Backup & Replication
  ☆105Updated last year
• G0ldenGunSec / GetWebDAVStatus
  Determine if the WebClient Service (WebDAV) is running on a remote system
  ☆125Updated 10 months ago
• rootSySdk / PowerGPOAbuse
  Powershell version of SharpGPOAbuse
  ☆71Updated 3 years ago