Port forwarding via MSRPC (445/tcp) [WIP]
☆34Aug 26, 2021Updated 4 years ago
Alternatives and similar repositories for lateral
Users that are interested in lateral are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Tapir: a tool to search through NIST CVE database, with cache and regex.☆17Jan 20, 2023Updated 3 years ago
- Repository for dirty scripts and PoCs☆20Feb 18, 2025Updated last year
- A Python-based tool for analyzing Active Directory security posture by processing LDAP dumps, NTDS.dit extracts, and password cracking re…☆27May 6, 2025Updated last year
- nuclei scanner for proxyshell ( CVE-2021-34473 )☆46Oct 9, 2022Updated 3 years ago
- NTFS parsing library in C#. Allows one to parse and read NTFS structures on disk.☆33Jul 16, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- WMkick is a TCP protocol redirector/MITM tool that targets NTLM authentication message flows in WMI (135/tcp) and Powershell-Remoting/WSM…☆43Aug 2, 2021Updated 4 years ago
- Tool to obtain hash using MS-SNTP for user accounts☆31Jan 22, 2025Updated last year
- A multithreaded, queued SSH key and/or password spraying tool.☆20Jan 5, 2023Updated 3 years ago
- Generate AES128/256 Kerberos keys for an AD account using a plaintext password and Python3☆88Jun 1, 2022Updated 4 years ago
- Platform independent library for interfacing windows security descriptors☆22Jan 2, 2026Updated 6 months ago
- karma WiFi attack implementation☆57Oct 23, 2024Updated last year
- ☆15Oct 17, 2025Updated 9 months ago
- Strstr with user-supplied needle and filename as a BOF.☆32Sep 27, 2021Updated 4 years ago
- PoC for CVE-2022-26809, analisys and considerations are shown in the github.io.☆106Jun 18, 2022Updated 4 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Windows RPC example calling stubs generated from MS-LSAT and MS-LSAD☆29Jan 4, 2024Updated 2 years ago
- A script that greps composite key-like strings from a KeePassXC process dump, then uses a customized version of pykeepass library to unlo…☆33Nov 12, 2022Updated 3 years ago
- Extension of SMBLibrary for RPC calls☆33Jun 11, 2024Updated 2 years ago
- Proof of Concept in Go from Secureworks' research on Azure Active Directory Brute-Force Attacks. Inspired by @treebuilder's POC on PowerS…☆14Feb 23, 2022Updated 4 years ago
- Analyzing AD domains for security risks related to user accounts☆64Nov 11, 2022Updated 3 years ago
- Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from mem…☆117Oct 21, 2023Updated 2 years ago
- Cmdlets for capturing Windows Events☆14Mar 11, 2022Updated 4 years ago
- A little implant which SSH's back with a shell☆38Feb 1, 2022Updated 4 years ago
- An injector that use PT_LOAD technique☆12Nov 27, 2022Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆29Oct 15, 2023Updated 2 years ago
- Red Team Stuffs☆19Jul 7, 2022Updated 4 years ago
- 「🔎」CORS vulnerability scanner☆12Dec 7, 2024Updated last year
- A PoC that uses the DirSync protocol to poll Active Directory for changes☆13Aug 16, 2020Updated 5 years ago
- Divide full port scan results and use it for targeted Nmap runs☆333Jul 1, 2024Updated 2 years ago
- Just a PoC to turn xlsx (regular Excel files) into xlsm (Excel file with macro) and slipping inside a macro (vbaProject.bin)☆144Sep 4, 2021Updated 4 years ago
- Implementation of b4rtiks's SharpMiniDump using NTFS transactions to avoid writting the minidump to disk and exfiltrating it via HTTPS us…☆70Nov 14, 2020Updated 5 years ago
- ☆23Nov 13, 2021Updated 4 years ago
- ☆16May 20, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆154Jan 6, 2023Updated 3 years ago
- Collection of remote authentication triggers in C#☆537May 15, 2024Updated 2 years ago
- A simplified version of DotNetToJScript to create a JScript file which loads a .NET v2 assembly from memory.☆46Mar 1, 2021Updated 5 years ago
- Opsec tool for finding user sessions by analyzing event log files through RPC (MS-EVEN)☆82Jun 11, 2024Updated 2 years ago
- 解决使用默认密码webshell的问题☆26Jan 20, 2022Updated 4 years ago
- OffensivePipeline allows to download, compile (without Visual Studio) and obfuscate C# tools for Red Team exercises.☆88Mar 2, 2022Updated 4 years ago
- HTTP Server serving obfuscated Powershell Scripts/Payloads☆95Jul 3, 2021Updated 5 years ago