Alternatives and similar repositories for ntlm-scanner:

Users that are interested in ntlm-scanner are comparing it to the libraries listed below

• ReverendThing / Carnivore
  Microsoft External Attack Tool
  ☆178Updated 2 years ago
• sensepost / UserEnum
  Domain user enumeration tool
  ☆215Updated last year
• chryzsh / awesome-bloodhound
  A curated list of awesome BloodhoundAD resources
  ☆232Updated 2 years ago
• Mr-Un1k0d3r / PoisonHandler
  lateral movement techniques that can be used during red team exercises
  ☆269Updated 5 years ago
• mdsecactivebreach / SharpPack
  An Insider Threat Toolkit
  ☆149Updated 6 years ago
• nccgroup / OneLogicalMyth_Shell
  A HTA shell to assist with breakout assessments.
  ☆112Updated 3 years ago
• dafthack / Check-LocalAdminHash
  Check-LocalAdminHash is a PowerShell tool that attempts to authenticate to multiple hosts over either WMI or SMB using a password hash to…
  ☆176Updated last year
• HarmJ0y / ASREPRoast
  Project that retrieves crackable hashes from KRB5 AS-REP responses for users without kerberoast preauthentication enabled.
  ☆198Updated 6 years ago
• lkys37en / Start-ADEnum
  Tool that automates Active Directory enumeration
  ☆89Updated 3 years ago
• violentlydave / mkhtaccess_red
  Auto-generate an HTaccess for payload delivery -- automatically pulls ips/nets/etc from known sandbox companies/sources that have been se…
  ☆168Updated 4 years ago
• SpiderLabs / SCShell
  Fileless lateral movement tool that relies on ChangeServiceConfigA to run command
  ☆106Updated 5 years ago
• nopfor / ntlm_challenger
  Parse NTLM challenge messages over HTTP and SMB
  ☆144Updated 2 years ago
• nccgroup / Carnivore
  Tool for assessing on-premises Microsoft servers authentication such as ADFS, Skype, Exchange, and RDWeb
  ☆144Updated 4 years ago
• elnerd / Get-NetNTLM
  Powershell module to get the NetNTLMv2 hash of the current user
  ☆93Updated 2 years ago
• quickbreach / ExchangeRelayX
  An NTLM relay tool to the EWS endpoint for on-premise exchange servers. Provides an OWA for hackers.
  ☆302Updated 2 years ago
• HarmJ0y / DAMP
  The Discretionary ACL Modification Project: Persistence Through Host-based Security Descriptor Modification
  ☆377Updated 5 years ago
• wavestone-cdt / AD-security-workshop
  Resources for our Active Directory security workshops
  ☆140Updated 3 years ago
• outflanknl / Recon-AD
  Recon-AD, an AD recon tool based on ADSI and reflective DLL’s
  ☆322Updated 5 years ago
• vletoux / MakeMeEnterpriseAdmin
  ☆257Updated 2 years ago
• incredibleindishell / Windows-AD-environment-related
  This Repository contains the stuff related to windows Active directory environment exploitation
  ☆146Updated last year
• busterb / msmailprobe
  Office 365 and Exchange Enumeration
  ☆183Updated 5 years ago
• porterhau5 / BloodHound-Owned
  A collection of files for adding and leveraging custom properties in BloodHound.
  ☆182Updated 5 years ago
• guidepointsecurity / RedCommander
  Red Team C2 Infrastructure built in AWS using Ansible!
  ☆225Updated 4 years ago
• lorentzenman / youzer
  Fake User Generator for Active Directory Environments
  ☆156Updated 6 years ago
• ThunderGunExpress / BADministration
  ☆129Updated last year
• samratashok / RACE
  RACE is a PowerShell module for executing ACL attacks against Windows targets.
  ☆215Updated last year
• Mr-Un1k0d3r / SPFAbuse
  SPF are not as strong as you may think. Red Team tool to send email on behalf of your target corp
  ☆136Updated 3 years ago
• invokethreatguy / AggressorCollection
  Collection of awesome Cobalt Strike Aggressor Scripts. All credit due to the authors
  ☆151Updated 6 years ago
• soffensive / windowsblindread
  A list of files / paths to probe when arbitrary files can be read on a Microsoft Windows operating system
  ☆201Updated last year
• mikesiegel / ews-crack
  ☆138Updated 5 years ago