Alternatives and similar repositories for Red-Team-Notes

Users that are interested in Red-Team-Notes are comparing it to the libraries listed below

• seriotonctf / AD-Tools
  List of some AD tools I frequently use
  ☆47Updated 2 months ago
• sinsinology / CVE-2024-29849
  Veeam Backup Enterprise Manager Authentication Bypass (CVE-2024-29849)
  ☆90Updated last year
• watchtowrlabs / fortios-auth-bypass-check-CVE-2024-55591
  ☆68Updated 7 months ago
• horizon3ai / CVE-2024-9464
  Proof of Concept Exploit for CVE-2024-9464
  ☆45Updated 10 months ago
• ASP4RUX / bypassEDR-AV
  ☆57Updated 9 months ago
• MWR-CyberSec / AD-CS-Forest-Exploiter
  Exploit AD CS misconfiguration allowing privilege escalation and persistence from any child domain to full forest compromise
  ☆98Updated last year
• watchtowrlabs / watchTowr-vs-FortiWeb-CVE-2025-25257
  ☆87Updated last month
• synacktiv / CVE-2024-43468
  ☆91Updated 7 months ago
• p4p1 / havoc-bloodhound
  A GUI wrapper inside of Havoc to interact with bloodhound CE
  ☆72Updated last year
• sliverarmory / hashdump
  Dump Windows SAM hashes
  ☆42Updated 2 years ago
• CyberSecurityUP / Awesome-EDR-Evasion
  ☆87Updated 6 months ago
• chebuya / Havoc-C2-SSRF-poc
  CVE-2024-41570: Havoc C2 0.7 Teamserver SSRF exploit
  ☆75Updated 11 months ago
• CyberSecurityUP / Windows-API-for-Red-Team
  ☆78Updated last year
• smokeme / ansible-havoc
  Scripts I use to deploy Havoc on Linode and setup categorization and SSL
  ☆41Updated last year
• chebuya / exploits
  Repo for all my exploits/PoCs
  ☆51Updated 3 months ago
• CICADA8-Research / LogHunter
  Opsec tool for finding user sessions by analyzing event log files through RPC (MS-EVEN)
  ☆72Updated last year
• EQSTLab / CVE-2024-46538
  PfSense Stored XSS lead to Arbitrary Code Execution exploit
  ☆47Updated 7 months ago
• ad0nis / ntlm_relay_gat
  ☆160Updated last year
• 0xBienCuit / InfraRed-AWS
  ☆59Updated 10 months ago
• watchtowrlabs / fortios-auth-bypass-poc-CVE-2024-55591
  ☆67Updated 6 months ago
• Leo4j / Invoke-SMBRemoting
  Interactive Shell and Command Execution over Named-Pipes (SMB) for Fileless lateral movement
  ☆174Updated 3 months ago
• Leo4j / PowerDACL
  A tool to abuse weak permissions of Active Directory Discretionary Access Control Lists (DACLs) and Access Control Entries (ACEs)
  ☆58Updated last month
• Aur3ns / LsassStealer
  Morpheus is an lsass stealer that extracts lsass.exe in RAM and exfiltrates it via forged and crypted NTP packets. For authorized testin…
  ☆106Updated 2 months ago
• watchtowrlabs / Fortijump-Exploit-CVE-2024-47575
  Fortinet Fortimanager Unauthenticated Remote Code Execution AKA FortiJump CVE-2024-47575
  ☆88Updated 9 months ago
• sinsinology / CVE-2024-6670
  ☆34Updated 11 months ago
• dmcxblue / Red-Team-Guide
  A small red team course
  ☆40Updated 2 years ago
• danti1988 / adcshunter
  Uses rpcdump to locate the ADCS server, and identify if ESC8 is vulnerable from unauthenticated perspective.
  ☆83Updated 11 months ago
• matro7sh / matro7sh_loaders
  this script adds the ability to encode shellcode (.bin) in XOR,chacha20, AES. You can choose between 2 loaders (Myph / 221b)
  ☆83Updated last year
• OffsecDeer / TargetedTimeroast
  Tamper Active Directory user attributes to collect their hashes with MS-SNTP
  ☆40Updated 7 months ago
• watchtowrlabs / watchTowr-vs-progress-moveit_CVE-2024-5806
  Exploit for the CVE-2024-5806
  ☆45Updated last year