Alternatives and similar repositories for AD-Tools

Users that are interested in AD-Tools are comparing it to the libraries listed below

• MWR-CyberSec / AD-CS-Forest-Exploiter
  Exploit AD CS misconfiguration allowing privilege escalation and persistence from any child domain to full forest compromise
  ☆99Updated last year
• seriotonctf / Red-Team-Notes
  ☆44Updated last month
• watchtowrlabs / watchTowr-vs-FortiWeb-CVE-2025-25257
  ☆88Updated 2 months ago
• ASP4RUX / bypassEDR-AV
  ☆58Updated 10 months ago
• watchtowrlabs / fortios-auth-bypass-check-CVE-2024-55591
  ☆68Updated 7 months ago
• horizon3ai / CVE-2024-9464
  Proof of Concept Exploit for CVE-2024-9464
  ☆45Updated 11 months ago
• p4p1 / havoc-bloodhound
  A GUI wrapper inside of Havoc to interact with bloodhound CE
  ☆72Updated last year
• ph0ebus / Tomcat-CVE-2024-50379-Poc
  RCE through a race condition in Apache Tomcat
  ☆56Updated 8 months ago
• RedTeamPentesting / adauth
  Active Directory Authentication Library
  ☆80Updated 3 weeks ago
• ad0nis / ntlm_relay_gat
  ☆161Updated last year
• CyberSecurityUP / Awesome-EDR-Evasion
  ☆90Updated 7 months ago
• Leo4j / PowerDACL
  A tool to abuse weak permissions of Active Directory Discretionary Access Control Lists (DACLs) and Access Control Entries (ACEs)
  ☆59Updated 2 months ago
• MinoTauro2020 / RedTeam-CRTL-Certification
  ☆18Updated 8 months ago
• sliverarmory / hashdump
  Dump Windows SAM hashes
  ☆42Updated 2 years ago
• chebuya / Havoc-C2-SSRF-poc
  CVE-2024-41570: Havoc C2 0.7 Teamserver SSRF exploit
  ☆75Updated last year
• CultCornholio / RedTeamTP
  ☆79Updated 3 months ago
• 0x4xel / Bat-Potato
  Automating Juicy Potato Local Privilege Escalation CMD exploit for penetration testers.
  ☆47Updated 2 years ago
• RayRRT / Active-Directory-Certificate-Services-abuse
  ☆52Updated 3 years ago
• mertdas / SharpLateral
  Lateral Movement
  ☆124Updated last year
• Leo4j / Invoke-SMBRemoting
  Interactive Shell and Command Execution over Named-Pipes (SMB) for Fileless lateral movement
  ☆176Updated 3 months ago
• sinsinology / CVE-2024-29849
  Veeam Backup Enterprise Manager Authentication Bypass (CVE-2024-29849)
  ☆90Updated last year
• p33d / CVE-2024-45519
  ☆42Updated 11 months ago
• watchtowrlabs / Fortijump-Exploit-CVE-2024-47575
  Fortinet Fortimanager Unauthenticated Remote Code Execution AKA FortiJump CVE-2024-47575
  ☆89Updated 9 months ago
• yehia-mamdouh / Shell3er
  PowerShell Reverse Shell
  ☆79Updated 2 years ago
• mlcsec / proctools
  Small toolkit for extracting information and dumping sensitive strings from Windows processes
  ☆115Updated last year
• wtechsec / LSASS-Forked-Dump---Bypass-EDR-CrowdStrike
  ☆56Updated 4 months ago
• jayesther / OSEP_OSED_TOOLS
  Tooling for the OffSec Experienced Pentester (OSEP) and OffSec Exploit Developer (OSED) course
  ☆21Updated last year
• watchtowrlabs / connectwise-screenconnect_auth-bypass-add-user-poc
  ☆71Updated last year
• CyberSecurityUP / shellcode-tester-pro
  Shellcode Tester Pro is a graphical interface tool for analysis, simulated execution, and reverse engineering of malicious shellcodes.
  ☆36Updated 5 months ago
• dadevel / mssql-spider
  Automated exploitation of MSSQL servers at scale
  ☆117Updated 3 weeks ago