Alternatives and similar repositories for aardwolf:

Users that are interested in aardwolf are comparing it to the libraries listed below

• skelsec / aardwolfgui
  Asynchronous RDP/VNC client for Python (GUI)
  ☆67Updated 2 weeks ago
• slemire / WSPCoerce
  PoC to coerce authentication from Windows hosts using MS-WSP
  ☆228Updated last year
• nettitude / ETWHash
  C# POC to extract NetNTLMv1/v2 hashes from ETW provider
  ☆252Updated last year
• last-byte / RIPPL
  RIPPL is a tool that abuses a usermode only exploit to manipulate PPL processes on Windows
  ☆7Updated 2 years ago
• m8sec / CVE-2021-34527
  PrintNightmare (CVE-2021-34527) PoC Exploit
  ☆107Updated 2 years ago
• fortalice / bofhound
  Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel
  ☆317Updated 10 months ago
• MzHmO / TGSThief
  My implementation of the GIUDA project in C++
  ☆167Updated last year
• N4kedTurtle / PersistBOF
  A BOF to automate common persistence tasks for red teamers
  ☆270Updated last year
• MzHmO / NtlmThief
  Extracting NetNTLM without touching lsass.exe
  ☆233Updated last year
• p0dalirius / MSSQL-Analysis-Coerce
  A technique to coerce a Windows SQL Server to authenticate on an arbitrary machine.
  ☆125Updated last year
• Wh04m1001 / SysmonEoP
  ☆182Updated 2 years ago
• ThePorgs / impacket
  Impacket is a collection of Python classes for working with network protocols.
  ☆272Updated last week
• smokeme / airstrike
  ☆160Updated 5 months ago
• nickvourd / COM-Hunter
  COM Hijacking VOODOO
  ☆262Updated 10 months ago
• garrettfoster13 / aced
  ☆155Updated 2 months ago
• MzHmO / LeakedWallpaper
  Leak of any user's NetNTLM hash. Fixed in KB5040434
  ☆249Updated 5 months ago
• Tylous / Freeze
  Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods
  ☆101Updated last year
• mdsecactivebreach / DragonCastle
  A PoC that combines AutodialDLL lateral movement technique and SSP to scrape NTLM hashes from LSASS process.
  ☆294Updated 2 years ago
• Dec0ne / DavRelayUp
  DavRelayUp - a universal no-fix local privilege escalation in domain-joined windows workstations where LDAP signing is not enforced (the …
  ☆532Updated last year
• dirkjanm / forest-trust-tools
  Proof-of-concept tools for my AD Forest trust research
  ☆194Updated 7 months ago
• jfmaes / Invoke-DLLClone
  Koppeling x Metatwin x LazySign
  ☆205Updated 3 years ago
• ly4k / PassTheChallenge
  Recovering NTLM hashes from Credential Guard
  ☆331Updated 2 years ago
• powerseb / PowerExtract
  ☆113Updated last year
• lexfo / rpc2socks
  Post-exploit tool that enables a SOCKS tunnel via a Windows host using an extensible custom RPC proto over SMB through a named pipe.
  ☆182Updated 3 years ago
• zer1t0 / certi
  ADCS abuser
  ☆265Updated last year
• zyn3rgy / smbtakeover
  BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions
  ☆274Updated 2 months ago
• mandiant / ccmpwn
  ☆187Updated 9 months ago
• 1njected / CMLoot
  Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) SMB shares
  ☆166Updated last year
• ly4k / PetitPotam
  Python implementation for PetitPotam
  ☆190Updated 3 years ago
• SaadAhla / AMSI_patch
  Patching AmsiOpenSession by forcing an error branching
  ☆143Updated last year