Alternatives and similar repositories for AD-Tools

Users that are interested in AD-Tools are comparing it to the libraries listed below

• MWR-CyberSec / AD-CS-Forest-Exploiter
  Exploit AD CS misconfiguration allowing privilege escalation and persistence from any child domain to full forest compromise
  ☆101Updated last year
• seriotonctf / Red-Team-Notes
  ☆44Updated 2 weeks ago
• ASP4RUX / bypassEDR-AV
  ☆59Updated 11 months ago
• watchtowrlabs / watchTowr-vs-FortiWeb-CVE-2025-25257
  ☆88Updated 3 months ago
• p4p1 / havoc-bloodhound
  A GUI wrapper inside of Havoc to interact with bloodhound CE
  ☆71Updated last year
• watchtowrlabs / fortios-auth-bypass-check-CVE-2024-55591
  ☆68Updated 9 months ago
• sinsinology / CVE-2024-29849
  Veeam Backup Enterprise Manager Authentication Bypass (CVE-2024-29849)
  ☆90Updated last year
• synacktiv / CVE-2024-43468
  ☆92Updated 9 months ago
• ph0ebus / Tomcat-CVE-2024-50379-Poc
  RCE through a race condition in Apache Tomcat
  ☆56Updated 10 months ago
• RedTeamPentesting / adauth
  Active Directory Authentication Library
  ☆79Updated 3 weeks ago
• CICADA8-Research / LogHunter
  Opsec tool for finding user sessions by analyzing event log files through RPC (MS-EVEN)
  ☆75Updated last year
• 0x4xel / Bat-Potato
  Automating Juicy Potato Local Privilege Escalation CMD exploit for penetration testers.
  ☆48Updated 2 years ago
• The-Viper-One / Invoke-RDPThief
  Inject RDPThief into memory with PowerShell.
  ☆65Updated 9 months ago
• ad0nis / ntlm_relay_gat
  ☆160Updated last year
• horizon3ai / CVE-2024-9464
  Proof of Concept Exploit for CVE-2024-9464
  ☆45Updated last year
• matro7sh / matro7sh_loaders
  this script adds the ability to encode shellcode (.bin) in XOR,chacha20, AES. You can choose between 2 loaders (Myph / 221b)
  ☆83Updated last year
• MinoTauro2020 / RedTeam-CRTL-Certification
  ☆18Updated 10 months ago
• two06 / CerealKiller
  .NET deserialization hunter
  ☆80Updated last year
• CyberSecurityUP / Awesome-EDR-Evasion
  ☆95Updated 8 months ago
• CultCornholio / RedTeamTP
  ☆83Updated 5 months ago
• sliverarmory / hashdump
  Dump Windows SAM hashes
  ☆42Updated 2 years ago
• smokeme / ansible-havoc
  Scripts I use to deploy Havoc on Linode and setup categorization and SSL
  ☆42Updated last year
• chebuya / exploits
  Repo for all my exploits/PoCs
  ☆53Updated 5 months ago
• EQSTLab / CVE-2024-46538
  PfSense Stored XSS lead to Arbitrary Code Execution exploit
  ☆48Updated 9 months ago
• watchtowrlabs / Fortijump-Exploit-CVE-2024-47575
  Fortinet Fortimanager Unauthenticated Remote Code Execution AKA FortiJump CVE-2024-47575
  ☆92Updated 11 months ago
• Leo4j / PowerDACL
  A tool to abuse weak permissions of Active Directory Discretionary Access Control Lists (DACLs) and Access Control Entries (ACEs)
  ☆60Updated 3 months ago
• mertdas / SharpLateral
  Lateral Movement
  ☆124Updated last year
• watchtowrlabs / watchTowr-vs-progress-moveit_CVE-2024-5806
  Exploit for the CVE-2024-5806
  ☆45Updated last year
• dadevel / mssql-spider
  Automated exploitation of MSSQL servers at scale
  ☆125Updated last week
• Diverto / IPPrintC2
  PoC for using MS Windows printers for persistence / command and control via Internet Printing
  ☆148Updated last year