Alternatives and similar repositories for NTLMRecon:

Users that are interested in NTLMRecon are comparing it to the libraries listed below

• blurbdust / ldd2bh
  Convert ldapdomaindump to Bloodhound
  ☆79Updated last year
• GoSecure / ldap-scanner
  Checks for signature requirements over LDAP
  ☆96Updated 2 years ago
• iomoath / PyExchangePasswordSpray
  Microsoft Exchange password spray tool with proxy support.
  ☆40Updated 3 years ago
• optiv / KnockKnock
  Enumerate valid users within Microsoft Teams and OneDrive with clean output.
  ☆58Updated last month
• praetorian-inc / ADFSRelay
  Proof of Concept Utilities Developed to Research NTLM Relaying Attacks Targeting ADFS
  ☆178Updated 2 years ago
• sdcampbell / nmapurls
  Nmapurls parses Nmap xml reports from either piped input or command line arg and outputs a list of http(s) URL's to be used in an automat…
  ☆39Updated last year
• AssuranceMaladieSec / AD-description-password-finder
  Retrieve AD accounts description and search for password in it
  ☆83Updated 2 years ago
• optionalCTF / SSOh-No
  User enumeration and password spraying tool for testing Azure AD
  ☆69Updated 3 years ago
• laxa / SharpSecretsdump
  Secretsdump C# version only supporting local (live) operation
  ☆49Updated last year
• bashexplode / cs2webconfig
  Convert Cobalt Strike profiles to IIS web.config files
  ☆112Updated 3 years ago
• n00py / GetFGPP
  Get Fine Grained Password Policy
  ☆68Updated 11 months ago
• sfewer-r7 / CVE-2023-27532
  Exploit for CVE-2023-27532 against Veeam Backup & Replication
  ☆108Updated 2 years ago
• horizon3ai / backup_dc_registry
  A simple POC that abuses Backup Operator privileges to remote dump SAM, SYSTEM, and SECURITY
  ☆80Updated 3 years ago
• Qazeer / OffensivePythonPipeline
  Static standalone binaries for Linux and Windows (x64) of Python offensive tools. Compiled using PyInstaller, Docker for Windows, WSL2, a…
  ☆100Updated 2 years ago
• SolomonSklash / RubeusToCcache
  A small tool to convert Base64-encoded .kirbi tickets from Rubeus into .ccache files for Impacket
  ☆55Updated 4 years ago
• RayRRT / Active-Directory-Certificate-Services-abuse
  ☆48Updated 2 years ago
• smokeintheshell / CVE-2023-20198
  CVE-2023-20198 Exploit PoC
  ☆44Updated last year
• xRET2pwn / PickleC2
  PickleC2 is a post-exploitation and lateral movements framework
  ☆91Updated 3 years ago
• LuemmelSec / ntlmrelayx.py_to_exe
  ☆83Updated last year
• EncodeGroup / Gopher
  C# tool to discover low hanging fruits
  ☆92Updated 2 years ago
• 0x4xel / Bat-Potato
  Automating Juicy Potato Local Privilege Escalation CMD exploit for penetration testers.
  ☆41Updated 2 years ago
• RomanRII / jenkins-strike
  Cobalt Strike profile generator using Jenkins to automate the heavy lifting
  ☆34Updated 2 years ago
• nyxgeek / AzureAD_Autologon_Brute
  Brute force attack tool for Azure AD Autologon/Seamless SSO - Source: https://arstechnica.com/information-technology/2021/09/new-azure-ac…
  ☆99Updated 9 months ago
• wh0amitz / SharpRODC
  To audit the security of read-only domain controllers
  ☆115Updated last year
• zblurx / acltoolkit
  ACL abuse swiss-knife
  ☆119Updated 2 years ago
• NotMedic / Invoke-Nanodump
  HelpSystems Nanodump, but wrapped in powershell via Invoke-ReflectivePEInjection
  ☆54Updated 3 years ago
• Tw1sm / impacket
  Impacket is a collection of Python classes for working with network protocols.
  ☆17Updated 5 months ago
• blacklanternsecurity / dp_cryptomg
  Another tool for exploiting CVE-2017-9248, a cryptographic weakness in Telerik UI for ASP.NET AJAX dialog handler.
  ☆50Updated 7 months ago
• LudovicPatho / CVE-2022-26923_AD-Certificate-Services
  The vulnerability allowed a low-privileged user to escalate privileges to domain administrator in a default Active Directory environment …
  ☆44Updated 2 years ago
• 0xe7 / RoastInTheMiddle
  ☆71Updated last year