Alternatives and similar repositories for turnt

Users that are interested in turnt are comparing it to the libraries listed below

• Yeeb1 / SockTail
  Lightweight binary that joins a device to a Tailscale network and exposes a local SOCKS5 proxy. Designed for red team operations and ephe…
  ☆236Updated 2 months ago
• boku7 / StringReaper
  Reaping treasures from strings in remote processes memory
  ☆270Updated 7 months ago
• synacktiv / GroupPolicyBackdoor
  Group Policy Objects manipulation and exploitation framework
  ☆251Updated last month
• trustedsec / specula
  ☆212Updated 3 months ago
• 0xthirteen / Carseat
  Python implementation of GhostPack's Seatbelt situational awareness tool
  ☆265Updated 10 months ago
• SpecterOps / MSSQLHound
  PowerShell collector for adding MSSQL attack paths to BloodHound with OpenGraph
  ☆237Updated 3 weeks ago
• Octoberfest7 / zip_smuggling
  Python3 utility for creating zip files that smuggle additional data for later extraction
  ☆258Updated 4 months ago
• django-88 / NomadScanner
  ☆164Updated 5 months ago
• RedTeamPentesting / keycred
  Generate and Manage KeyCredentialLinks
  ☆165Updated last month
• hdbreaker / Nimhawk
  A powerful, modular, lightweight and efficient command & control framework written in Nim.
  ☆202Updated 2 months ago
• dazzyddos / HSC24RedTeamInfra
  Slides and Codes used for the workshop Red Team Infrastructure Automation
  ☆194Updated last year
• safedv / RustSoliloquy
  A Rust implementation of Internal-Monologue — retrieving NetNTLM hashes without touching LSASS, leveraging SSPI for NTLM negotiation and …
  ☆168Updated 5 months ago
• TheManticoreProject / Delegations
  A tool to work with all types of Kerberos delegations (unconstrained, constrained, and resource-based constrained delegations) in Active …
  ☆208Updated 2 months ago
• NeffIsBack / wsuks
  Automating the MITM attack on WSUS
  ☆268Updated last week
• rtecCyberSec / BitlockMove
  Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking
  ☆342Updated 3 months ago
• xforcered / SoaPy
  SoaPy is a Proof of Concept (PoC) tool for conducting offensive interaction with Active Directory Web Services (ADWS) from Linux hosts.
  ☆244Updated 7 months ago
• cogiceo / GPOHound
  Offensive GPO dumping and analysis tool that leverages and enriches BloodHound data
  ☆317Updated 2 weeks ago
• xforcered / RemoteMonologue
  Weaponizing DCOM for NTLM Authentication Coercions
  ☆267Updated 2 months ago
• ajm4n / DLLHound
  Find potential DLL Sideloads on your windows computer
  ☆213Updated 8 months ago
• quarkslab / proxyblob
  SOCKS5 proxy tool that uses Azure Blob Storage as a means of communication.
  ☆247Updated 4 months ago
• praetorian-inc / ChromeAlone
  A tool to transform Chromium browsers into a C2 Implant
  ☆473Updated 3 weeks ago
• sensepost / susinternals
  psexecsvc - a python implementation of PSExec's native service implementation
  ☆217Updated 7 months ago
• MaLDAPtive / Invoke-Maldaptive
  MaLDAPtive is a framework for LDAP SearchFilter parsing, obfuscation, deobfuscation and detection.
  ☆309Updated last year
• RedSiege / Jigsaw
  Hide shellcode by shuffling bytes into a random array and reconstruct at runtime
  ☆199Updated 6 months ago
• logangoins / SharpSuccessor
  SharpSuccessor is a .NET Proof of Concept (POC) for fully weaponizing Yuval Gordon’s (@YuG0rd) BadSuccessor attack from Akamai.
  ☆336Updated 4 months ago
• sud0Ru / NauthNRPC
  Enumerate Domain Users Without Authentication
  ☆266Updated 5 months ago
• arosenmund / defcon33_silence_kill_edr
  ☆322Updated last month
• SenSecurity / Founding
  Founding is a generator that will create a loader encrypted or obfuscated with different execution types
  ☆90Updated last month
• TheManticoreProject / Manticore
  A cross platform library to write offensive and defensive security tools in Go
  ☆121Updated 3 weeks ago
• denniskniep / DeviceCodePhishing
  This is a novel technique that leverages the well-known Device Code phishing approach. It dynamically initiates the flow when the victim …
  ☆171Updated last week