Alternatives and similar repositories for Invoke-RunAsWithCert

Users that are interested in Invoke-RunAsWithCert are comparing it to the libraries listed below

• BC-SECURITY / IronSharpPack
  IronSharpPack is a repo of popular C# projects that have been embedded into IronPython scripts that execute an AMSI bypass and then refle…
  ☆118Updated last year
• CCob / Shwmae
  ☆163Updated 9 months ago
• kfallahi / UnderlayCopy
  PowerShell toolkit that extracts locked Windows files (SAM, SYSTEM, NTDS, ...) using MFT parsing and raw disk reads
  ☆185Updated 2 weeks ago
• decoder-it / KrbRelay-SMBServer
  ☆228Updated last year
• badsectorlabs / sccm-http-looter
  Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) shares via HTTP(s)
  ☆201Updated last year
• SpecterOps / cred1py
  A Python POC for CRED1 over SOCKS5
  ☆161Updated last year
• CCob / DRSAT
  Disconnected RSAT - A method of running Group Policy Manager, Certificate Authority and Certificate Templates MMC snap-ins from non-domai…
  ☆266Updated 10 months ago
• 1r0BIT / TaskHound
  Tool to enumerate privileged Scheduled Tasks on Remote Systems
  ☆128Updated this week
• dirkjanm / roadtools_hybrid
  Hybrid AD utilities for ROADtools
  ☆97Updated 5 months ago
• mandiant / ccmpwn
  ☆214Updated last year
• logangoins / SOAPy
  SOAPy is a Proof of Concept (PoC) tool for conducting offensive interaction with Active Directory Web Services (ADWS) from Linux hosts.
  ☆148Updated 3 months ago
• 0xsp-SRD / MDE_Enum
  comprehensive .NET tool designed to extract and display detailed information about Windows Defender exclusions and Attack Surface Reducti…
  ☆209Updated last year
• skelsec / pysnaffler
  pysnaffler
  ☆105Updated 2 months ago
• temp43487580 / EntraPassTheCert
  tool for requesting Entra ID's P2P certificate and authenticating to a remote Entra joinned devices with it
  ☆126Updated 2 months ago
• Macmod / ldapx
  Flexible LDAP proxy that can be used to inspect & transform all LDAP packets generated by other tools on the fly.
  ☆169Updated 10 months ago
• ibaiC / MFade
  A python port of @dafthack's MFAsweep with some added OPSEC functionality. MFAde can be used to find single-factor authentication failure…
  ☆48Updated 3 months ago
• 3lp4tr0n / RemoteMonologue
  Weaponizing DCOM for NTLM Authentication Coercions
  ☆174Updated last week
• andrecrafts / Bloodhound-query-legacy2ce
  A Python based tool to convert custom queries from Legacy BloodHound to BloodHound CE format, with the option to directly upload them to …
  ☆32Updated last month
• t94j0 / adexplorersnapshot-rs
  ☆83Updated last year
• p0dalirius / ShareHound
  A python tool to map the access rights of network shares into a BloodHound OpenGraphs easily
  ☆207Updated this week
• HuskyHacks / SharpTokenFinder
  C# implementation of TokenFinder. Steal M365 access tokens from Office Desktop apps
  ☆140Updated last year
• synacktiv / SCCMSecrets
  SCCMSecrets.py aims at exploiting SCCM policies distribution for credentials harvesting, initial access and lateral movement.
  ☆247Updated 2 months ago
• 1njected / CMLoot
  Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) SMB shares
  ☆188Updated 2 years ago
• synacktiv / OUned
  The OUned project automating Active Directory Organizational Units ACL exploitation through gPLink poisoning
  ☆152Updated last week
• rtecCyberSec / RAITrigger
  Local SYSTEM auth trigger for relaying
  ☆165Updated 3 months ago
• Synzack / ludus_sccm
  An Ansible collection that installs an SCCM deployment with optional configurations.
  ☆95Updated 4 months ago
• wotwot563 / aad_prt_bof
  ☆145Updated last year
• xforcered / RemoteMonologue
  Weaponizing DCOM for NTLM Authentication Coercions
  ☆272Updated 4 months ago
• trustedsec / DitExplorer
  Tool for viewing NTDS.dit
  ☆186Updated 8 months ago
• SadProcessor / BloodHoundOperator
  BloodHound PowerShell client
  ☆70Updated last month