Enumerate usernames on a domain where you have no creds by using SMB Relay with low priv.
☆400May 20, 2020Updated 6 years ago
Alternatives and similar repositories for ridrelay
Users that are interested in ridrelay are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- SMB MiTM tool with a focus on attacking clients through file content swapping, lnk swapping, as well as compromising any data passed over…☆381Aug 17, 2018Updated 8 years ago
- Domain user enumeration tool☆216Nov 2, 2023Updated 3 years ago
- Remote Recon and Collection☆461Nov 23, 2017Updated 8 years ago
- PowerShell Runspace Post Exploitation Toolkit☆1,551Aug 2, 2019Updated 7 years ago
- Powershell script for enumerating vulnerable DCOM Applications☆264Nov 30, 2018Updated 7 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- A PowerShell script for helping to find vulnerable settings in AD Group Policy. (deprecated, use Grouper2 instead!)☆731Feb 5, 2019Updated 7 years ago
- Gets plaintext Active Directory credentials if you're on the internal network but outside the AD environment☆1,185Oct 24, 2018Updated 8 years ago
- PowerShell oneliner to retrieve wdigest passwords from the memory☆221Dec 11, 2017Updated 8 years ago
- ☆524Sep 15, 2022Updated 4 years ago
- A tool to elevate privilege with Windows Tokens☆1,065Oct 6, 2023Updated 3 years ago
- HTA encryption tool for RedTeams☆1,429Nov 9, 2022Updated 3 years ago
- An NTLM relay tool to the EWS endpoint for on-premise exchange servers. Provides an OWA for hackers.☆305Sep 7, 2022Updated 4 years ago
- Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS☆1,693Oct 11, 2018Updated 8 years ago
- NTLMv1 Multitool☆675Jun 26, 2026Updated 4 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)☆1,614Dec 10, 2018Updated 7 years ago
- A Bring Your Own Land Toolkit that Doubles as a WMI Provider☆288Oct 31, 2018Updated 8 years ago
- The project is called Great SCT (Great Scott). Great SCT is an open source project to generate application white list bypasses. This tool…☆1,123Feb 10, 2021Updated 5 years ago
- WePWNise generates architecture independent VBA code to be used in Office documents or templates and automates bypassing application cont…☆349Aug 27, 2018Updated 8 years ago
- Loader, dropper generator with multiple features for bypassing client-side and network-side countermeasures.☆938May 8, 2019Updated 7 years ago
- RedSnarf is a pen-testing / red-teaming tool for Windows environments☆1,220Sep 14, 2020Updated 6 years ago
- A PowerShell example of the Windows zero day priv esc☆327Sep 12, 2018Updated 8 years ago
- goddi (go dump domain info) dumps Active Directory domain information☆424May 31, 2022Updated 4 years ago
- SMB Relay Attack Script☆145Dec 6, 2018Updated 7 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- SessionGopher is a PowerShell tool that uses WMI to extract saved session information for remote access tools such as WinSCP, PuTTY, Supe…☆1,345Nov 22, 2022Updated 3 years ago
- Automated deployment of Windows and Active Directory test lab networks. Useful for red and blue teams.☆491Feb 16, 2019Updated 7 years ago
- A C# implementation of PrivExchange by @_dirkjan.☆155Mar 15, 2019Updated 7 years ago
- This project is just a dumping ground for random scripts I've developed.☆138Aug 14, 2024Updated 2 years ago
- A PowerShell based utility for the creation of malicious Office macro documents.☆1,109Nov 3, 2017Updated 9 years ago
- A JavaScript and VBScript Based Empire Launcher, which runs within their own embedded PowerShell Host.☆323Jun 5, 2017Updated 9 years ago
- Perform a MitM attack and extract clear text credentials from RDP connections☆1,456Nov 20, 2025Updated 11 months ago
- ☆229May 10, 2018Updated 8 years ago
- In case you didn't now how to restore the user password after a password reset (get the previous hash with DCSync)☆172Jun 8, 2017Updated 9 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A multithreaded tool designed to identify if credentials are valid, invalid, or local admin valid credentials within a network at-scale v…☆449May 25, 2022Updated 4 years ago
- ntlm relay attack to Exchange Web Services☆331Jan 15, 2018Updated 8 years ago
- PowerShell Remote Download Cradle Generator & Obfuscator☆852Mar 23, 2018Updated 8 years ago
- Smb Scanner from PingCastle☆125Apr 9, 2019Updated 7 years ago
- CVE-2018-8581☆367Oct 21, 2022Updated 4 years ago
- Exchange your privileges for Domain Admin privs by abusing Exchange☆1,088Jan 23, 2020Updated 6 years ago
- Powershell C2 Server and Implants☆574Nov 11, 2019Updated 6 years ago