Alternatives and similar repositories for NTLMRecon:

Users that are interested in NTLMRecon are comparing it to the libraries listed below

• GoSecure / ldap-scanner
  Checks for signature requirements over LDAP
  ☆96Updated 2 years ago
• blurbdust / ldd2bh
  Convert ldapdomaindump to Bloodhound
  ☆78Updated last year
• laxa / SharpSecretsdump
  Secretsdump C# version only supporting local (live) operation
  ☆50Updated last year
• iomoath / PyExchangePasswordSpray
  Microsoft Exchange password spray tool with proxy support.
  ☆40Updated 3 years ago
• horizon3ai / backup_dc_registry
  A simple POC that abuses Backup Operator privileges to remote dump SAM, SYSTEM, and SECURITY
  ☆79Updated 3 years ago
• optionalCTF / SSOh-No
  User enumeration and password spraying tool for testing Azure AD
  ☆69Updated 3 years ago
• optiv / KnockKnock
  Enumerate valid users within Microsoft Teams and OneDrive with clean output.
  ☆57Updated 3 weeks ago
• LudovicPatho / CVE-2022-26923_AD-Certificate-Services
  The vulnerability allowed a low-privileged user to escalate privileges to domain administrator in a default Active Directory environment …
  ☆44Updated 2 years ago
• Qazeer / OffensivePythonPipeline
  Static standalone binaries for Linux and Windows (x64) of Python offensive tools. Compiled using PyInstaller, Docker for Windows, WSL2, a…
  ☆100Updated 2 years ago
• bashexplode / cs2webconfig
  Convert Cobalt Strike profiles to IIS web.config files
  ☆112Updated 3 years ago
• n00py / DCSync
  DCSync Attack from Outside using Impacket
  ☆112Updated 2 years ago
• blacklanternsecurity / dp_cryptomg
  Another tool for exploiting CVE-2017-9248, a cryptographic weakness in Telerik UI for ASP.NET AJAX dialog handler.
  ☆46Updated 6 months ago
• sfewer-r7 / CVE-2023-27532
  Exploit for CVE-2023-27532 against Veeam Backup & Replication
  ☆108Updated last year
• praetorian-inc / ADFSRelay
  Proof of Concept Utilities Developed to Research NTLM Relaying Attacks Targeting ADFS
  ☆175Updated 2 years ago
• sdcampbell / nmapurls
  Nmapurls parses Nmap xml reports from either piped input or command line arg and outputs a list of http(s) URL's to be used in an automat…
  ☆39Updated last year
• xRET2pwn / PickleC2
  PickleC2 is a post-exploitation and lateral movements framework
  ☆90Updated 3 years ago
• bitsadmin / dir2json
  Tool for efficient directory enumeration
  ☆55Updated 4 months ago
• AssuranceMaladieSec / AD-description-password-finder
  Retrieve AD accounts description and search for password in it
  ☆83Updated 2 years ago
• snovvcrash / OffensivePipeline
  OffensivePipeline allows to download, compile (without Visual Studio) and obfuscate C# tools for Red Team exercises.
  ☆90Updated 3 years ago
• RayRRT / Active-Directory-Certificate-Services-abuse
  ☆45Updated 2 years ago
• rootSySdk / PowerGPOAbuse
  Powershell version of SharpGPOAbuse
  ☆74Updated 3 years ago
• p0dalirius / MSSQL-Analysis-Coerce
  A technique to coerce a Windows SQL Server to authenticate on an arbitrary machine.
  ☆125Updated last year
• LuemmelSec / ntlmrelayx.py_to_exe
  ☆79Updated last year
• RedSiege / DigDug
  ☆73Updated 6 months ago
• kymb0 / Stealth_shellcode_runners
  ☆55Updated 11 months ago
• 0x4xel / Bat-Potato
  Automating Juicy Potato Local Privilege Escalation CMD exploit for penetration testers.
  ☆39Updated 2 years ago
• d3lb3 / KeePass-the-Hash
  A script that greps composite key-like strings from a KeePassXC process dump, then uses a customized version of pykeepass library to unlo…
  ☆31Updated 2 years ago
• NotMedic / Invoke-Nanodump
  HelpSystems Nanodump, but wrapped in powershell via Invoke-ReflectivePEInjection
  ☆54Updated 3 years ago
• zblurx / acltoolkit
  ACL abuse swiss-knife
  ☆119Updated 2 years ago
• ly4k / Pypykatz
  Modified version of Pypykatz to print encrypted credentials
  ☆50Updated 2 years ago