pwnfoo / NTLMRecon
Enumerate information from NTLM authentication enabled web endpoints 🔎
☆465Updated 4 months ago
Related projects ⓘ
Alternatives and complementary repositories for NTLMRecon
- scan for NTLM directories☆346Updated 4 months ago
- scavenger : is a multi-threaded post-exploitation scanning tool for scavenging systems, finding most frequently used files and folders a…☆329Updated 5 years ago
- Disposable and resilient red team infrastructure with Terraform☆252Updated 5 years ago
- Kerberoast attack -pure python-☆419Updated 11 months ago
- A Network Enumeration and Attack Toolset for Windows Active Directory Environments.☆244Updated 4 months ago
- RACE is a PowerShell module for executing ACL attacks against Windows targets.☆210Updated last year
- Active Directory ACL exploitation with BloodHound☆701Updated 2 years ago
- Enumerate valid usernames from Office 365 using ActiveSync, Autodiscover v1, or office.com login page.☆242Updated 6 months ago
- Analyze ARP requests to identify intercommunicating hosts and stale network address configurations (SNACs)☆61Updated 2 years ago
- Local privilege escalation, or remote code execution, through Splunk Universal Forwarder (UF) misconfigurations☆244Updated 2 years ago
- PowerSploit - A PowerShell Post-Exploitation Framework☆216Updated 2 years ago
- LDAP library for auditing MS AD☆365Updated 2 months ago
- Network Pivoting Toolkit☆435Updated last year
- A Cobalt Strike tool to audit Active Directory user accounts for weak, well known or easy guessable passwords.☆424Updated 2 years ago
- Obfuscate powershell scripts by replacing Function names, Variables and Parameters.☆510Updated last year
- Red Team C2 Infrastructure built in AWS using Ansible!☆219Updated 4 years ago
- Chameleon: A tool for evading Proxy categorisation☆459Updated 2 years ago
- This is a weaponized WSUS exploit☆281Updated last year
- Python script that performs email address validation against Office 365 without submitting login attempts.☆323Updated 4 years ago
- Password spraying tool and Bloodhound integration☆212Updated last year
- Invoke-ZeroLogon allows attackers to impersonate any computer, including the domain controller itself, and execute remote procedure calls…☆215Updated 4 years ago
- Automating juicy potato local privilege escalation exploit for penetration testers☆138Updated 3 years ago
- NTLMv1 Multitool☆588Updated last month
- ☆511Updated 2 years ago
- WSuspicious - A tool to abuse insecure WSUS connections for privilege escalations☆346Updated 4 years ago
- linikatz is a tool to attack AD on UNIX☆526Updated last year
- ☆147Updated last year
- Rapid Attack Infrastructure (RAI)☆296Updated 3 years ago
- Office 365 and Exchange Enumeration☆181Updated 5 years ago
- Utility to enumerate users, groups and computers from a Windows domain through LDAP queries☆348Updated 3 years ago