Alternatives and similar repositories for ntlm-scanner

Users that are interested in ntlm-scanner are comparing it to the libraries listed below

• sensepost / UserEnum
  Domain user enumeration tool
  ☆214Updated 2 years ago
• lorentzenman / youzer
  Fake User Generator for Active Directory Environments
  ☆158Updated 7 years ago
• nopfor / ntlm_challenger
  Parse NTLM challenge messages over HTTP and SMB
  ☆151Updated 3 years ago
• HarmJ0y / ASREPRoast
  Project that retrieves crackable hashes from KRB5 AS-REP responses for users without kerberoast preauthentication enabled.
  ☆208Updated 7 years ago
• mdsecactivebreach / SharpPack
  An Insider Threat Toolkit
  ☆155Updated 6 years ago
• ReverendThing / Carnivore
  Microsoft External Attack Tool
  ☆178Updated 2 years ago
• soffensive / windowsblindread
  A list of files / paths to probe when arbitrary files can be read on a Microsoft Windows operating system
  ☆205Updated 2 years ago
• chryzsh / awesome-bloodhound
  A curated list of awesome BloodhoundAD resources
  ☆235Updated 3 years ago
• lkys37en / Start-ADEnum
  Tool that automates Active Directory enumeration
  ☆88Updated 4 years ago
• ReversecLabs / peas
  PEAS is a Python 2 library and command line application for running commands on an ActiveSync server e.g. Microsoft Exchange.
  ☆184Updated 2 years ago
• mikesiegel / ews-crack
  ☆140Updated 5 years ago
• vletoux / SpoolerScanner
  Check if MS-RPRN is remotely available with powershell/c#
  ☆178Updated 7 years ago
• fox-it / LDAPFragger
  ☆198Updated 5 years ago
• Mr-Un1k0d3r / PoisonHandler
  lateral movement techniques that can be used during red team exercises
  ☆273Updated 5 years ago
• vletoux / MakeMeEnterpriseAdmin
  ☆261Updated 3 years ago
• kfosaaen / Get-LAPSPasswords
  Powershell function to pull the local admin passwords from LDAP, stored there by LAPS.
  ☆121Updated 5 years ago
• wavestone-cdt / AD-security-workshop
  Resources for our Active Directory security workshops
  ☆140Updated 4 years ago
• quickbreach / ExchangeRelayX
  An NTLM relay tool to the EWS endpoint for on-premise exchange servers. Provides an OWA for hackers.
  ☆306Updated 3 years ago
• sailay1996 / cve-2020-1337-poc
  poc for CVE-2020-1337 (Windows Print Spooler Elevation of Privilege)
  ☆171Updated 5 years ago
• nccgroup / OneLogicalMyth_Shell
  A HTA shell to assist with breakout assessments.
  ☆112Updated 4 years ago
• incredibleindishell / Windows-AD-environment-related
  This Repository contains the stuff related to windows Active directory environment exploitation
  ☆153Updated 2 years ago
• violentlydave / mkhtaccess_red
  Auto-generate an HTaccess for payload delivery -- automatically pulls ips/nets/etc from known sandbox companies/sources that have been se…
  ☆167Updated 5 years ago
• G0ldenGunSec / PowerPriv
  A Powershell implementation of PrivExchange designed to run under the current user's context
  ☆125Updated 6 years ago
• busterb / msmailprobe
  Office 365 and Exchange Enumeration
  ☆199Updated 6 years ago
• chrismaddalena / SharpCloud
  Simple C# for checking for the existence of credential files related to AWS, Microsoft Azure, and Google Compute.
  ☆177Updated 7 years ago
• RedSiege / AggressorAssessor
  Aggressor scripts for phases of a pen test or red team assessment
  ☆184Updated last year
• BishopFox / pwn-pulse
  Exploit for Pulse Connect Secure SSL VPN arbitrary file read vulnerability (CVE-2019-11510)
  ☆137Updated 5 years ago
• bb00 / zer0dump
  Abuse CVE-2020-1472 (Zerologon) to take over a domain and then repair the local stored machine account password.
  ☆181Updated 2 years ago
• kmkz / PowerShell
  Some .ps1 scripts for pentesting
  ☆138Updated 2 weeks ago
• Mr-Un1k0d3r / RedTeamScripts
  Repo with various Red Team scripts
  ☆146Updated 5 years ago