Capture incoming TGTs in pure PowerShell to avoid using Rubeus
☆30Mar 29, 2026Updated 3 months ago
Alternatives and similar repositories for PS-KUD
Users that are interested in PS-KUD are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Bloodhound alternative - simple ingestor. It generates low-level commands to exploit the AD easily and automatically: learn and control e…☆81Apr 26, 2026Updated 2 months ago
- dcsync bof☆54Feb 13, 2026Updated 5 months ago
- A PoC UDRL for Cobalt Strike built with Crystal Palace that combines Raphael Mudge's page streaming technique with a modular call gate (D…☆132Jan 21, 2026Updated 5 months ago
- Advanced shellcode injector for images supports BMP, GIF, EXIF (JPEG), and LSB (PNG) techniques. Includes XOR encoding, offset indexing, …☆27Jun 11, 2025Updated last year
- AdaptixC2 default beacon agent extended to support Crystal Palace loaders.☆62May 4, 2026Updated 2 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Active Directory forensic framework☆16May 18, 2026Updated last month
- Havoc C2 BOF port of the KslD.sys BYOVD technique. Credential extraction from lsass via physical memory — no OpenProcess, no auditable AP…☆142Apr 22, 2026Updated 2 months ago
- ☆31Jun 18, 2025Updated last year
- SharpCoercer is a .NET 4.8 C# tool that leverages 16 different RPC-based coercion methods to force remote Windows hosts to authenticate t…☆58Jul 13, 2025Updated last year
- ☆49Apr 9, 2025Updated last year
- modified mssqlclient from impacket to extract policies from the SCCM database☆47Feb 24, 2026Updated 4 months ago
- Polymorphic x64 shellcode loader — indirect syscalls, phantom DLL hollowing, call stack spoofing, patchless AMSI/ETW bypass, zero CRT …☆23May 24, 2026Updated last month
- ☆45Apr 13, 2026Updated 3 months ago
- BOF POC of the DSCourier project / invoking WinGet via COM☆90Apr 23, 2026Updated 2 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- ☆18Sep 22, 2024Updated last year
- Atomic test units for BOF execution☆60Apr 26, 2026Updated 2 months ago
- Windows SSH Misconfiguration Discovery Tool - Map lateral movement paths through misconfigured SSH services in Active Directory environme…☆88May 11, 2026Updated 2 months ago
- alternative to procdump☆11May 26, 2021Updated 5 years ago
- Modular User-Defined Reflective Loader (UDRL) built on Crystal Palace for controlled DLL execution and evasion research.☆30Apr 14, 2026Updated 3 months ago
- Filesystem interaction via firebeam virtual machine execution☆58Mar 26, 2026Updated 3 months ago
- Automatically scan the file system to identify Electron applications vulnerable to ASAR tampering.☆162Nov 28, 2025Updated 7 months ago
- Bypass WiFi client isolation on Open and WPA2-PSK networks☆44Oct 14, 2025Updated 9 months ago
- A Ligolo-ng JavaScript agent working inside Chrome & Chromium-based browsers by leveraging Isolated Web Applications.☆134Mar 30, 2026Updated 3 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- GenZ Shellcode Generator to execute commands with winExec API☆22Apr 27, 2025Updated last year
- HackBar plugin for Burpsuite☆27Apr 15, 2021Updated 5 years ago
- open source implementation of the UDC2 spec used in Cobalt Strike☆54Jul 4, 2026Updated last week
- Pure PowerShell port of PassTheCert tool to authenticate to an LDAP/S server with a certificate through Schannel☆60Apr 13, 2025Updated last year
- Tiny and fast port scanner (Sliver edition)☆31Feb 17, 2026Updated 4 months ago
- Adaptix C2 extender to support Cobalt Strike Malleable C2 profiles☆47Jun 28, 2026Updated 2 weeks ago
- Bypass user-land hooks by syscall tampering via the Trap Flag☆139Aug 25, 2025Updated 10 months ago
- ☆22Oct 25, 2024Updated last year
- POC for CVE-2025-54918 and a technical demonstration.☆61Jan 12, 2026Updated 6 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- A Dockerized build pipeline for custom Windows x64 shellcode☆55Dec 12, 2025Updated 7 months ago
- A C project that generates usernames based on input lists and format you decide yourself☆12Jun 29, 2026Updated 2 weeks ago
- Technical Reference to multiple relay techniques☆190May 21, 2026Updated last month
- ☆22May 19, 2026Updated last month
- Enumerate Domain Users Without Authentication☆290Apr 22, 2025Updated last year
- My studies on Malware Development☆20Jul 6, 2026Updated last week
- Fritter is a heavily modified fork of TheWover and Odzhan's Donut shellcode generator.☆243Jun 11, 2026Updated last month