Alternatives and similar repositories for adfsbrute

Users that are interested in adfsbrute are comparing it to the libraries listed below

• EspressoCake / PPLDump_BOF

  View on GitHub
  A faithful transposition of the key features/functionality of @itm4n's PPLDump project as a BOF.
  ☆143Sep 24, 2021Updated 4 years ago
• S3cur3Th1sSh1t / NamedPipePTH

  View on GitHub
  Pass the Hash to a named pipe for token Impersonation
  ☆146May 1, 2021Updated 4 years ago
• Flangvik / DeployPrinterNightmare

  View on GitHub
  C# tool for installing a shared network printer abusing the PrinterNightmare bug to allow other network machines easy privesc!
  ☆183Aug 4, 2021Updated 4 years ago
• mitchmoser / AtYourService

  View on GitHub
  Service Enumeration C# .NET Assembly
  ☆59Sep 14, 2021Updated 4 years ago
• foofus-sph1nx / PyMailSniper

  View on GitHub
  Python port of MailSniper to exfiltrate emails via EWS endpoint
  ☆88Feb 2, 2022Updated 4 years ago
• bats3c / ADCSPwn

  View on GitHub
  A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certifica…
  ☆863Mar 20, 2023Updated 2 years ago
• xFreed0m / ADFSpray

  View on GitHub
  Python3 tool to perform password spraying against Microsoft Online service using various methods
  ☆86Mar 12, 2023Updated 2 years ago
• Mr-Un1k0d3r / ADHuntTool

  View on GitHub
  official repo for the AdHuntTool (part of the old RedTeamCSharpScripts repo)
  ☆232Jun 10, 2022Updated 3 years ago
• rvrsh3ll / SharpSMBSpray

  View on GitHub
  Spray a hash via smb to check for local administrator access
  ☆142Feb 7, 2021Updated 5 years ago
• GhostPack / ForgeCert

  View on GitHub
  "Golden" certificates
  ☆710Aug 17, 2024Updated last year
• RedSiege / EDD

  View on GitHub
  Enumerate Domain Data
  ☆335Sep 13, 2023Updated 2 years ago
• GhostPack / RestrictedAdmin

  View on GitHub
  Remotely enables Restricted Admin Mode
  ☆215Sep 3, 2021Updated 4 years ago
• CCob / MirrorDump

  View on GitHub
  Another LSASS dumping tool that uses a dynamically compiled LSA plugin to grab an lsass handle and API hooking for capturing the dump in…
  ☆269Mar 18, 2021Updated 4 years ago
• Mr-Un1k0d3r / RedTeamCCode

  View on GitHub
  Red Team C code repo
  ☆569Dec 16, 2024Updated last year
• hausec / ProxyLogon

  View on GitHub
  ☆298Jul 2, 2024Updated last year
• matterpreter / spotter

  View on GitHub
  Targeted Payload Execution
  ☆100Apr 9, 2020Updated 5 years ago
• zer1t0 / certi

  View on GitHub
  ADCS abuser
  ☆313Feb 6, 2023Updated 3 years ago
• cube0x0 / BofRoast

  View on GitHub
  Beacon Object Files for roasting Active Directory
  ☆235Feb 21, 2022Updated 3 years ago
• cube0x0 / SharpMapExec

  View on GitHub
  ☆667Nov 17, 2021Updated 4 years ago
• mandiant / ADFSDump

  View on GitHub
  ☆376Aug 7, 2023Updated 2 years ago
• cube0x0 / KrbRelay

  View on GitHub
  Framework for Kerberos relaying
  ☆939May 29, 2022Updated 3 years ago
• Aetsu / OffensivePipeline

  View on GitHub
  OfensivePipeline allows you to download and build C# tools, applying certain modifications in order to improve their evasion for Red Team…
  ☆819Oct 27, 2023Updated 2 years ago
• rasta-mouse / RuralBishop

  View on GitHub
  D/Invoke port of UrbanBishop
  ☆108Jul 19, 2020Updated 5 years ago
• nodauf / GoMapEnum

  View on GitHub
  User enumeration and password bruteforce on Azure, ADFS, OWA, O365, Teams and gather emails on Linkedin
  ☆484Sep 24, 2025Updated 4 months ago
• cube0x0 / SharpSystemTriggers

  View on GitHub
  Collection of remote authentication triggers in C#
  ☆524May 15, 2024Updated last year
• mgeeky / SharpWebServer

  View on GitHub
  Red Team oriented C# Simple HTTP & WebDAV Server with Net-NTLM hashes capture functionality
  ☆289Jun 26, 2023Updated 2 years ago
• mandiant / ADFSpoof

  View on GitHub
  ☆410Updated this week
• TheWover / CertStealer

  View on GitHub
  A .NET tool for exporting and importing certificates without touching disk.
  ☆499Oct 8, 2021Updated 4 years ago
• mdsecactivebreach / Farmer

  View on GitHub
  ☆415Apr 28, 2021Updated 4 years ago
• pkb1s / SharpRelay

  View on GitHub
  ☆181Feb 3, 2021Updated 5 years ago
• dirkjanm / adconnectdump

  View on GitHub
  Dump Azure AD Connect credentials for Azure AD and Active Directory
  ☆779Aug 26, 2025Updated 5 months ago
• ReversecLabs / physmem2profit

  View on GitHub
  Physmem2profit can be used to create a minidump of a target hosts' LSASS process by analysing physical memory remotely
  ☆424Jul 27, 2022Updated 3 years ago
• klezVirus / CheeseTools

  View on GitHub
  Self-developed tools for Lateral Movement/Code Execution
  ☆718Aug 17, 2021Updated 4 years ago
• FuzzySecurity / StandIn

  View on GitHub
  StandIn is a small .NET35/45 AD post-exploitation toolkit
  ☆830Dec 2, 2023Updated 2 years ago
• eladshamir / Whisker

  View on GitHub
  Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, …
  ☆930Nov 11, 2024Updated last year
• antonioCoco / RemotePotato0

  View on GitHub
  Windows Privilege Escalation from User to Domain Admin.
  ☆1,438Dec 18, 2022Updated 3 years ago
• nettitude / SharpSocks

  View on GitHub
  Tunnellable HTTP/HTTPS socks4a proxy written in C# and deployable via PowerShell
  ☆498Mar 15, 2023Updated 2 years ago
• deepinstinct / LsassSilentProcessExit

  View on GitHub
  Command line interface to dump LSASS memory to disk via SilentProcessExit
  ☆455Dec 23, 2020Updated 5 years ago
• hausec / Bloodhound-Custom-Queries

  View on GitHub
  Custom Query list for the Bloodhound GUI based off my cheatsheet
  ☆836Oct 29, 2025Updated 3 months ago