Alternatives and similar repositories for aardwolf:

Users that are interested in aardwolf are comparing it to the libraries listed below

• skelsec / aardwolfgui
  Asynchronous RDP/VNC client for Python (GUI)
  ☆69Updated 2 months ago
• fortalice / modifyCertTemplate
  ADCS cert template modification and ACL enumeration
  ☆135Updated last year
• nettitude / Aladdin
  ☆220Updated last year
• slemire / WSPCoerce
  PoC to coerce authentication from Windows hosts using MS-WSP
  ☆230Updated last year
• sensepost / susinternals
  psexecsvc - a python implementation of PSExec's native service implementation
  ☆187Updated last month
• Tylous / Freeze
  Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods
  ☆106Updated last year
• trustedsec / DitExplorer
  Tool for viewing NTDS.dit
  ☆150Updated 2 weeks ago
• MzHmO / LeakedWallpaper
  Leak of any user's NetNTLM hash. Fixed in KB5040434
  ☆252Updated 7 months ago
• moloch-- / sliver-py
  A Python gRPC Client Library for Sliver
  ☆67Updated 4 months ago
• MzHmO / TGSThief
  My implementation of the GIUDA project in C++
  ☆181Updated last year
• nettitude / ETWHash
  C# POC to extract NetNTLMv1/v2 hashes from ETW provider
  ☆253Updated last year
• rotarydrone / GlobalUnProtect
  Decrypt GlobalProtect configuration and cookie files.
  ☆145Updated 6 months ago
• powerseb / PowerExtract
  ☆117Updated last year
• sliverarmory / armory
  The Official Sliver Armory
  ☆98Updated 2 months ago
• zyn3rgy / smbtakeover
  BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions
  ☆291Updated 4 months ago
• skelsec / pysnaffler
  pysnaffler
  ☆91Updated 2 weeks ago
• mandiant / ccmpwn
  ☆196Updated last year
• byinarie / teams_dump
  PoC for dumping and decrypting cookies in the latest version of Microsoft Teams
  ☆132Updated last year
• 1njected / CMLoot
  Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) SMB shares
  ☆173Updated 2 years ago
• ly4k / PassTheChallenge
  Recovering NTLM hashes from Credential Guard
  ☆333Updated 2 years ago
• 0xv1n / RemoteSessionEnum
  Remotely Enumerate sessions using undocumented Windows Station APIs
  ☆113Updated 7 months ago
• SaadAhla / AMSI_patch
  Patching AmsiOpenSession by forcing an error branching
  ☆144Updated last year
• garrettfoster13 / aced
  ☆158Updated 4 months ago
• VirtualAlllocEx / Payload-Download-Cradles
  This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR …
  ☆257Updated 2 years ago
• Qazeer / OffensivePythonPipeline
  Static standalone binaries for Linux and Windows (x64) of Python offensive tools. Compiled using PyInstaller, Docker for Windows, WSL2, a…
  ☆100Updated 2 years ago
• Offensive-Panda / LsassReflectDumping
  This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…
  ☆192Updated 5 months ago
• fortalice / bofhound
  Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel
  ☆322Updated last year
• almandin / ntdsdotsqlite
  A small utility to translate NTDS.dit files to SQLite format.
  ☆72Updated last year
• zimedev / certipy-merged
  Tool for Active Directory Certificate Services enumeration and abuse
  ☆120Updated 2 months ago
• 0xsp-SRD / MDE_Enum
  comprehensive .NET tool designed to extract and display detailed information about Windows Defender exclusions and Attack Surface Reducti…
  ☆195Updated 9 months ago