puzzlepeaches / NTLMReconLinks
Enumerate information from NTLM authentication enabled web endpoints 🔎
☆34Updated last year
Alternatives and similar repositories for NTLMRecon
Users that are interested in NTLMRecon are comparing it to the libraries listed below
Sorting:
- TokenCert☆98Updated 8 months ago
- Decrypt Veeam database passwords☆159Updated last year
- SharpExShell automates the DCOM lateral movment technique which abuses ActivateMicrosoftApp method of Excel application.☆74Updated last year
- ☆107Updated 5 months ago
- Lateral Movement via the .NET Profiler☆82Updated 8 months ago
- Modified versions of the Cobalt Strike Process Injection Kit☆98Updated last year
- Neo4LDAP is a query and visualization tool focused on Active Directory environments. It combines LDAP syntax with graph-based data analys…☆77Updated last month
- SuperSharpShares is a tool designed to automate enumerating domain shares, allowing for quick verification of accessible shares by your a…☆74Updated last year
- A C# tool to output crackable DPAPI hashes from user MasterKeys☆134Updated 10 months ago
- Lateral Movement☆124Updated last year
- ☆83Updated last year
- ☆35Updated 5 months ago
- Click Once + App Domain☆62Updated last year
- ☆97Updated 11 months ago
- BadExclusionsNWBO is an evolution from BadExclusions to identify folder custom or undocumented exclusions on AV/EDR☆76Updated last year
- DFSCoerce exe revisited version with custom authentication☆40Updated last year
- ☆56Updated 5 months ago
- This technique leverages PowerShell's .NET interop layer and COM automation to achieve stealthy command execution by abusing implicit typ…☆47Updated 2 months ago
- Tool to bypass LSA Protection (aka Protected Process Light)☆55Updated 7 months ago
- ☆82Updated last year
- Extract registry and NTDS secrets from local or remote disk images☆43Updated 4 months ago
- C# tool to identify and exploit weaknesses within MSSQL instances in Active Directory environments☆111Updated 3 years ago
- Programmatically start WebClient from an unprivileged session to enable that juicy privesc.☆75Updated 2 years ago
- A LAPS dumper written using the impacket library.☆31Updated 2 years ago
- C# version of NTLMRawUnHide☆72Updated 2 years ago
- Windows Persistence Toolkit in C#☆36Updated 2 years ago
- A RunAs clone with the ability to specify the password as an argument.☆112Updated 2 years ago
- .NET Post-Exploitation Utility for Abusing Explicit Certificate Mappings in ADCS☆147Updated 5 months ago
- ☆52Updated 5 months ago
- A BOF to enumerate system process, their protection levels, and more.☆117Updated 8 months ago