Alternatives and similar repositories for turnt

Users that are interested in turnt are comparing it to the libraries listed below

• Yeeb1 / SockTail
  Lightweight binary that joins a device to a Tailscale network and exposes a local SOCKS5 proxy. Designed for red team operations and ephe…
  ☆355Updated 2 weeks ago
• boku7 / StringReaper
  Reaping treasures from strings in remote processes memory
  ☆272Updated 8 months ago
• synacktiv / GroupPolicyBackdoor
  Group Policy Objects manipulation and exploitation framework
  ☆257Updated last week
• SpecterOps / MSSQLHound
  PowerShell collector for adding MSSQL attack paths to BloodHound with OpenGraph
  ☆252Updated last month
• trustedsec / specula
  ☆211Updated 4 months ago
• TheManticoreProject / Delegations
  A tool to work with all types of Kerberos delegations (unconstrained, constrained, and resource-based constrained delegations) in Active …
  ☆208Updated 3 months ago
• django-88 / NomadScanner
  ☆164Updated 5 months ago
• safedv / RustSoliloquy
  A Rust implementation of Internal-Monologue — retrieving NetNTLM hashes without touching LSASS, leveraging SSPI for NTLM negotiation and …
  ☆168Updated 5 months ago
• 0xthirteen / Carseat
  Python implementation of GhostPack's Seatbelt situational awareness tool
  ☆266Updated 11 months ago
• hdbreaker / Nimhawk
  A powerful, modular, lightweight and efficient command & control framework written in Nim.
  ☆204Updated 3 weeks ago
• RedTeamPentesting / keycred
  Generate and Manage KeyCredentialLinks
  ☆172Updated last week
• SenSecurity / Founding
  Founding is a generator that will create a loader encrypted or obfuscated with different execution types
  ☆94Updated last month
• Octoberfest7 / zip_smuggling
  Python3 utility for creating zip files that smuggle additional data for later extraction
  ☆260Updated 5 months ago
• dazzyddos / HSC24RedTeamInfra
  Slides and Codes used for the workshop Red Team Infrastructure Automation
  ☆194Updated last year
• NeffIsBack / wsuks
  Automating the MITM attack on WSUS
  ☆271Updated last week
• ajm4n / DLLHound
  Find potential DLL Sideloads on your windows computer
  ☆214Updated 9 months ago
• xforcered / SoaPy
  SoaPy is a Proof of Concept (PoC) tool for conducting offensive interaction with Active Directory Web Services (ADWS) from Linux hosts.
  ☆250Updated 8 months ago
• logangoins / SharpSuccessor
  SharpSuccessor is a .NET Proof of Concept (POC) for fully weaponizing Yuval Gordon’s (@YuG0rd) BadSuccessor attack from Akamai.
  ☆339Updated 3 weeks ago
• sud0Ru / NauthNRPC
  Enumerate Domain Users Without Authentication
  ☆268Updated 5 months ago
• ZephrFish / pyLDAPGui
  Python based GUI for browsing LDAP
  ☆167Updated last month
• sensepost / susinternals
  psexecsvc - a python implementation of PSExec's native service implementation
  ☆217Updated 8 months ago
• RedSiege / Jigsaw
  Hide shellcode by shuffling bytes into a random array and reconstruct at runtime
  ☆201Updated 6 months ago
• bagelByt3s / LudusHound
  LudusHound is a tool for red and blue teams that transforms BloodHound data into a fully functional, Active Directory replica environment…
  ☆316Updated last month
• yo-yo-yo-jbo / dumping_lsass
  The different ways to dump lsass
  ☆191Updated 2 months ago
• fin3ss3g0d / StoneKeeper
  StoneKeeper C2, an experimental EDR evasion framework for research purposes
  ☆207Updated 9 months ago
• rtecCyberSec / BitlockMove
  Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking
  ☆357Updated 3 months ago
• xforcered / RemoteMonologue
  Weaponizing DCOM for NTLM Authentication Coercions
  ☆267Updated 3 months ago
• arosenmund / defcon33_silence_kill_edr
  ☆325Updated 2 months ago
• cogiceo / GPOHound
  Offensive GPO dumping and analysis tool that leverages and enriches BloodHound data
  ☆322Updated last month
• synacktiv / SCCMSecrets
  SCCMSecrets.py aims at exploiting SCCM policies distribution for credentials harvesting, initial access and lateral movement.
  ☆244Updated last month