Alternatives and similar repositories for aardwolf

Users that are interested in aardwolf are comparing it to the libraries listed below

• slemire / WSPCoerce
  PoC to coerce authentication from Windows hosts using MS-WSP
  ☆249Updated last year
• skelsec / aardwolfgui
  Asynchronous RDP/VNC client for Python (GUI)
  ☆71Updated 5 months ago
• HavocFramework / Talon
  (Demo) 3rd party agent for Havoc
  ☆139Updated last year
• lexfo / rpc2socks
  Post-exploit tool that enables a SOCKS tunnel via a Windows host using an extensible custom RPC proto over SMB through a named pipe.
  ☆187Updated 4 years ago
• sliverarmory / armory
  The Official Sliver Armory
  ☆109Updated 2 months ago
• nettitude / ETWHash
  C# POC to extract NetNTLMv1/v2 hashes from ETW provider
  ☆256Updated 2 years ago
• last-byte / RIPPL
  RIPPL is a tool that abuses a usermode only exploit to manipulate PPL processes on Windows
  ☆7Updated 3 years ago
• MzHmO / psexec_noinstall
  Repository contains psexec, which will help to exploit the forgotten pipe
  ☆170Updated 7 months ago
• m8sec / CVE-2021-34527
  PrintNightmare (CVE-2021-34527) PoC Exploit
  ☆110Updated 2 years ago
• p0dalirius / MSSQL-Analysis-Coerce
  A technique to coerce a Windows SQL Server to authenticate on an arbitrary machine.
  ☆130Updated last year
• N4kedTurtle / PersistBOF
  A BOF to automate common persistence tasks for red teamers
  ☆279Updated 2 years ago
• fortalice / modifyCertTemplate
  ADCS cert template modification and ACL enumeration
  ☆137Updated last year
• moloch-- / sliver-py
  A Python gRPC Client Library for Sliver
  ☆69Updated 2 months ago
• zblurx / acltoolkit
  ACL abuse swiss-knife
  ☆124Updated 2 years ago
• nettitude / Aladdin
  ☆221Updated last year
• SaadAhla / AMSI_patch
  Patching AmsiOpenSession by forcing an error branching
  ☆146Updated last year
• Hackndo / WebclientServiceScanner
  Python tool to Check running WebClient services on multiple targets based on @leechristensen
  ☆277Updated 3 years ago
• MzHmO / TGSThief
  My implementation of the GIUDA project in C++
  ☆184Updated last year
• Acebond / ReverseSocks5
  Single executable reverse SOCKS5 proxy written in Golang.
  ☆137Updated 5 months ago
• wavvs / nanorobeus
  COFF file (BOF) for managing Kerberos tickets.
  ☆300Updated last year
• gh0x0st / OSEP-Breaking-Chains
  A collection of code snippets built to assist with breaking chains.
  ☆117Updated last year
• nccgroup / DroppedConnection
  ☆126Updated 2 years ago
• ly4k / PassTheChallenge
  Recovering NTLM hashes from Credential Guard
  ☆339Updated 2 years ago
• Tylous / Mangle
  Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs
  ☆83Updated 2 years ago
• SaadAhla / GithubC2
  Github as C2 Demonstration , free API = free C2 Infrastructure
  ☆140Updated last year
• MzHmO / NtlmThief
  Extracting NetNTLM without touching lsass.exe
  ☆237Updated last year
• Kudaes / Dumpy
  Reuse open handles to dynamically dump LSASS.
  ☆246Updated last year
• dirkjanm / forest-trust-tools
  Proof-of-concept tools for my AD Forest trust research
  ☆217Updated last year
• S3cur3Th1sSh1t / SharpNamedPipePTH
  Pass the Hash to a named pipe for token Impersonation
  ☆302Updated last year
• horizon3ai / backup_dc_registry
  A simple POC that abuses Backup Operator privileges to remote dump SAM, SYSTEM, and SECURITY
  ☆84Updated 3 years ago