Alternatives and similar repositories for GPOddity:

Users that are interested in GPOddity are comparing it to the libraries listed below

• Flangvik / ObfuscatedSharpCollection
  Attempt at Obfuscated version of SharpCollection
  ☆206Updated last week
• synacktiv / SCCMSecrets
  SCCMSecrets.py aims at exploiting SCCM policies distribution for credentials harvesting, initial access and lateral movement.
  ☆208Updated 4 months ago
• JPG0mez / ADCSync
  Use ESC1 to perform a makeshift DCSync and dump hashes
  ☆205Updated last year
• xforcered / SoaPy
  SoaPy is a Proof of Concept (PoC) tool for conducting offensive interaction with Active Directory Web Services (ADWS) from Linux hosts.
  ☆197Updated 2 months ago
• Friends-Security / SharpExclusionFinder
  Tool designed to find folder exclusions using Windows Defender using command line utility MpCmdRun.exe as a low privileged user, without …
  ☆193Updated 6 months ago
• sensepost / susinternals
  psexecsvc - a python implementation of PSExec's native service implementation
  ☆195Updated 2 months ago
• coffeegist / bofhound
  Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel
  ☆205Updated 2 weeks ago
• Offensive-Panda / LsassReflectDumping
  This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…
  ☆198Updated 6 months ago
• zyn3rgy / smbtakeover
  BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions
  ☆298Updated 5 months ago
• ThePorgs / impacket
  Impacket is a collection of Python classes for working with network protocols.
  ☆280Updated 3 months ago
• MzHmO / LeakedWallpaper
  Leak of any user's NetNTLM hash. Fixed in KB5040434
  ☆254Updated 8 months ago
• login-securite / conpass
  Continuous password spraying tool
  ☆181Updated last month
• slemire / WSPCoerce
  PoC to coerce authentication from Windows hosts using MS-WSP
  ☆235Updated last year
• mandiant / ccmpwn
  ☆201Updated last year
• zimedev / certipy-merged
  Tool for Active Directory Certificate Services enumeration and abuse
  ☆150Updated last week
• Leo4j / Invoke-SessionHunter
  Retrieve and display information about active user sessions on remote computers. No admin privileges required.
  ☆183Updated 8 months ago
• RalfHacker / Kerbeus-BOF
  BOF for Kerberos abuse (an implementation of some important features of the Rubeus).
  ☆458Updated 3 weeks ago
• Helixo32 / NimBlackout
  Kill AV/EDR leveraging BYOVD attack
  ☆352Updated last year
• SecuraBV / Timeroast
  Timeroasting scripts by Tom Tervoort
  ☆282Updated last year
• ajm4n / DLLHound
  Find potential DLL Sideloads on your windows computer
  ☆201Updated 3 months ago
• xforcered / RemoteMonologue
  Weaponizing DCOM for NTLM Authentication Coercions
  ☆206Updated 2 weeks ago
• wietze / Invoke-ArgFuscator
  Invoke-ArgFuscator is an open-source, cross-platform PowerShell module that helps generate obfuscated command-lines for common system-nat…
  ☆164Updated last week
• MzHmO / NtlmThief
  Extracting NetNTLM without touching lsass.exe
  ☆235Updated last year
• werdhaihai / AtlasReaper
  A command-line tool for reconnaissance and targeted write operations on Confluence and Jira instances.
  ☆255Updated last year
• trustedsec / specula
  ☆191Updated 7 months ago
• cogiceo / GPOHound
  Offensive GPO dumping and analysis tool that leverages and enriches BloodHound data
  ☆101Updated this week
• mandiant / msi-search
  ☆276Updated last year
• fortalice / bofhound
  Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel
  ☆328Updated last year
• CrowdStrike / sccmhound
  A BloodHound collector for Microsoft Configuration Manager
  ☆314Updated 3 months ago
• decoder-it / KrbRelay-SMBServer
  ☆215Updated 6 months ago