Alternatives and similar repositories for ntlm-scanner

Users that are interested in ntlm-scanner are comparing it to the libraries listed below

• sensepost / UserEnum
  Domain user enumeration tool
  ☆215Updated last year
• HarmJ0y / ASREPRoast
  Project that retrieves crackable hashes from KRB5 AS-REP responses for users without kerberoast preauthentication enabled.
  ☆204Updated 6 years ago
• quickbreach / ExchangeRelayX
  An NTLM relay tool to the EWS endpoint for on-premise exchange servers. Provides an OWA for hackers.
  ☆308Updated 2 years ago
• chryzsh / awesome-bloodhound
  A curated list of awesome BloodhoundAD resources
  ☆230Updated 2 years ago
• vletoux / MakeMeEnterpriseAdmin
  ☆257Updated 2 years ago
• lkys37en / Start-ADEnum
  Tool that automates Active Directory enumeration
  ☆88Updated 4 years ago
• wavestone-cdt / AD-security-workshop
  Resources for our Active Directory security workshops
  ☆139Updated 3 years ago
• dafthack / Check-LocalAdminHash
  Check-LocalAdminHash is a PowerShell tool that attempts to authenticate to multiple hosts over either WMI or SMB using a password hash to…
  ☆178Updated last year
• kfosaaen / Get-LAPSPasswords
  Powershell function to pull the local admin passwords from LDAP, stored there by LAPS.
  ☆119Updated 5 years ago
• violentlydave / mkhtaccess_red
  Auto-generate an HTaccess for payload delivery -- automatically pulls ips/nets/etc from known sandbox companies/sources that have been se…
  ☆166Updated 4 years ago
• Mr-Un1k0d3r / PoisonHandler
  lateral movement techniques that can be used during red team exercises
  ☆273Updated 5 years ago
• lorentzenman / youzer
  Fake User Generator for Active Directory Environments
  ☆158Updated 6 years ago
• HarmJ0y / DAMP
  The Discretionary ACL Modification Project: Persistence Through Host-based Security Descriptor Modification
  ☆380Updated 5 years ago
• Mr-Un1k0d3r / RedTeamScripts
  Repo with various Red Team scripts
  ☆145Updated 4 years ago
• kmkz / PowerShell
  Some .ps1 scripts for pentesting
  ☆132Updated 4 years ago
• porterhau5 / BloodHound-Owned
  A collection of files for adding and leveraging custom properties in BloodHound.
  ☆185Updated 5 years ago
• cyberark / RiskySPN
  Detect and abuse risky SPNs
  ☆262Updated 8 years ago
• nopfor / ntlm_challenger
  Parse NTLM challenge messages over HTTP and SMB
  ☆148Updated 2 years ago
• nccgroup / OneLogicalMyth_Shell
  A HTA shell to assist with breakout assessments.
  ☆113Updated 3 years ago
• fox-it / LDAPFragger
  ☆193Updated 5 years ago
• mdsecactivebreach / SharpPack
  An Insider Threat Toolkit
  ☆151Updated 6 years ago
• jaredhaight / WindowsAttackAndDefenseLab
  ☆169Updated 5 years ago
• ReverendThing / Carnivore
  Microsoft External Attack Tool
  ☆179Updated 2 years ago
• ImpostorKeanu / eavesarp
  Analyze ARP requests to identify intercommunicating hosts and stale network address configurations (SNACs)
  ☆67Updated 3 years ago
• elnerd / Get-NetNTLM
  Powershell module to get the NetNTLMv2 hash of the current user
  ☆94Updated 2 years ago
• decoder-it / whoami-priv-Hackinparis2019
  Slides from my talk in "Hackinparis" 2019 edition
  ☆91Updated 6 years ago
• SadProcessor / Cheats
  Various Cheat Sheets
  ☆181Updated 4 years ago
• vletoux / SpoolerScanner
  Check if MS-RPRN is remotely available with powershell/c#
  ☆173Updated 6 years ago
• G0ldenGunSec / PowerPriv
  A Powershell implementation of PrivExchange designed to run under the current user's context
  ☆125Updated 6 years ago
• BC-SECURITY / Invoke-ZeroLogon
  Invoke-ZeroLogon allows attackers to impersonate any computer, including the domain controller itself, and execute remote procedure calls…
  ☆217Updated 4 years ago