Alternatives and similar repositories for DitExplorer:

Users that are interested in DitExplorer are comparing it to the libraries listed below

• t94j0 / adexplorersnapshot-rs
  ☆78Updated 8 months ago
• kozmer / aad-bofs
  AzureAD beacon object files
  ☆115Updated 3 months ago
• decoder-it / ChgPass
  ☆125Updated last month
• decoder-it / ADCSCoercePotato
  ☆223Updated 10 months ago
• Offensive-Panda / LsassReflectDumping
  This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…
  ☆192Updated 5 months ago
• gsmith257-cyber / better-sliver
  Adversary Emulation Framework
  ☆96Updated 8 months ago
• mertdas / SharpLateral
  Lateral Movement
  ☆122Updated last year
• ZephrFish / QoL-BOFs
  Curated list of public Beacon Object Files(BOFs) build in as submodules for easy cloning
  ☆127Updated 3 months ago
• EvilBytecode / Lifetime-Amsi-EtwPatch
  Two in one, patch lifetime powershell console, no more etw and amsi!
  ☆85Updated 9 months ago
• rad9800 / FileRenameJunctionsEDRDisable
  ☆152Updated 3 months ago
• powerseb / PowerExtract
  ☆117Updated this week
• decoder-it / KrbRelay-SMBServer
  ☆210Updated 5 months ago
• logangoins / Stifle
  .NET Post-Exploitation Utility for Abusing Explicit Certificate Mappings in ADCS
  ☆118Updated last month
• synacktiv / OUned
  The OUned project automating Active Directory Organizational Units ACL exploitation through gPLink poisoning
  ☆111Updated this week
• FalconForceTeam / bof-winrm-client
  ☆105Updated 2 months ago
• mandiant / ccmpwn
  ☆197Updated last year
• rasta-mouse / CsWhispers
  Source generator to add D/Invoke and indirect syscall methods to a C# project.
  ☆176Updated last year
• coffeegist / bofhound
  Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel
  ☆203Updated 3 months ago
• mlcsec / EDRenum-BOF
  Identify common EDR processes, directories, and services. Simple BOF of Invoke-EDRChecker.
  ☆118Updated 5 months ago
• synacktiv / Invoke-RunAsWithCert
  A PowerShell script to perform PKINIT authentication with the Windows API from a non domain-joined machine.
  ☆146Updated 10 months ago
• MythicAgents / Xenon
  A Mythic agent for Windows written in C
  ☆104Updated this week
• cybersectroll / SharpPersistSD
  ☆86Updated 10 months ago
• dmcxblue / SharpGhostTask
  A C# port from Invoke-GhostTask
  ☆114Updated last year
• zyn3rgy / smbtakeover
  BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions
  ☆291Updated 4 months ago
• BC-SECURITY / ScriptBlock-Smuggling
  Example code samples from our ScriptBlock Smuggling Blog post
  ☆90Updated 9 months ago
• Macmod / ldapx
  Flexible LDAP proxy that can be used to inspect & transform all LDAP packets generated by other tools on the fly.
  ☆107Updated 3 months ago
• decoder-it / KrbRelayEx-RPC
  ☆158Updated this week
• 0xv1n / RemoteSessionEnum
  Remotely Enumerate sessions using undocumented Windows Station APIs
  ☆113Updated 7 months ago
• TierZeroSecurity / edr_blocker
  Blocks EDR Telemetry by performing Person-in-the-Middle attack where network filtering is applied using iptables. The blocked destination…
  ☆141Updated 8 months ago
• ZERODETECTION / MSC_Dropper
  ☆148Updated 8 months ago