Alternatives and similar repositories for Red-teaming:

Users that are interested in Red-teaming are comparing it to the libraries listed below

• GoSecure / ldap-scanner
  Checks for signature requirements over LDAP
  ☆95Updated 2 years ago
• LudovicPatho / CVE-2022-26923_AD-Certificate-Services
  The vulnerability allowed a low-privileged user to escalate privileges to domain administrator in a default Active Directory environment …
  ☆44Updated 2 years ago
• ricardojba / Invoke-noPac
  .Net Assembly loader for the [CVE-2021-42287 - CVE-2021-42278] Scanner & Exploit noPac
  ☆60Updated last year
• iomoath / PyExchangePasswordSpray
  Microsoft Exchange password spray tool with proxy support.
  ☆40Updated 3 years ago
• bashexplode / cs2webconfig
  Convert Cobalt Strike profiles to IIS web.config files
  ☆112Updated 3 years ago
• RayRRT / Active-Directory-Certificate-Services-abuse
  ☆44Updated 2 years ago
• blacklanternsecurity / dp_cryptomg
  Another tool for exploiting CVE-2017-9248, a cryptographic weakness in Telerik UI for ASP.NET AJAX dialog handler.
  ☆45Updated 5 months ago
• Nariod / laz-y
  Automating payload generation for OSEP labs and exam.
  ☆34Updated 2 years ago
• ksecurity45 / ADCheatgen
  ☆15Updated 2 years ago
• LuemmelSec / ntlmrelayx.py_to_exe
  ☆77Updated last year
• laxa / SharpSecretsdump
  Secretsdump C# version only supporting local (live) operation
  ☆48Updated last year
• dmcxblue / Red-Team-Notes
  Just learning around new stuff mostly Red Teaming and such but will try to see if I can update or simplify them more, nothing too exotic …
  ☆38Updated 2 years ago
• liquidsec / aspnetCryptTools
  Just some random small tools for dealing with asp.net Forms Authentication Cookies
  ☆23Updated 3 years ago
• xRET2pwn / PickleC2
  PickleC2 is a post-exploitation and lateral movements framework
  ☆87Updated 3 years ago
• bitsadmin / dir2json
  Tool for efficient directory enumeration
  ☆55Updated 3 months ago
• horizon3ai / backup_dc_registry
  A simple POC that abuses Backup Operator privileges to remote dump SAM, SYSTEM, and SECURITY
  ☆80Updated 2 years ago
• NotMedic / Invoke-Nanodump
  HelpSystems Nanodump, but wrapped in powershell via Invoke-ReflectivePEInjection
  ☆53Updated 2 years ago
• mmnoureldin / UnmanagedPowerShell
  ☆27Updated last year
• blackarrowsec / Certify
  Active Directory certificate abuse.
  ☆37Updated 2 years ago
• jwardsmith / Active-Directory-Exploitation
  ☆39Updated last year
• ExAndroidDev / impacket
  Impacket is a collection of Python classes for working with network protocols.
  ☆39Updated 3 years ago
• LuemmelSec / CVE-2023-29357
  ☆52Updated last year
• crisprss / magicNetdefs
  Similar to Petitpotam, the netdfs service is enabled in Windows Server and AD environments, and the abused RPC method allows privileged p…
  ☆49Updated 2 years ago
• S3cur3Th1sSh1t / NamedPipePTH
  Pass the Hash to a named pipe for token Impersonation
  ☆140Updated 3 years ago
• ClickCyber / cve-2022-42889
  cve-2022-42889 Text4Shell CVE-2022-42889 affects Apache Commons Text versions 1.5 through 1.9. It has been patched as of Commons Text ver…
  ☆39Updated 2 years ago
• 0x4xel / Bat-Potato
  Automating Juicy Potato Local Privilege Escalation CMD exploit for penetration testers.
  ☆39Updated 2 years ago
• EncodeGroup / Gopher
  C# tool to discover low hanging fruits
  ☆89Updated 2 years ago
• praetorian-inc / NTLMRecon
  A tool for performing light brute-forcing of HTTP servers to identify commonly accessible NTLM authentication endpoints.
  ☆81Updated last year
• kymb0 / Stealth_shellcode_runners
  ☆55Updated 10 months ago
• ly4k / Pypykatz
  Modified version of Pypykatz to print encrypted credentials
  ☆51Updated 2 years ago