Capture incoming TGTs in pure PowerShell to avoid using Rubeus
☆30Mar 29, 2026Updated 7 months ago
Alternatives and similar repositories for PS-KUD
Users that are interested in PS-KUD are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Dumping all keys from a keytab file☆21Dec 1, 2025Updated 11 months ago
- A small set of Beacon Object Files (BOFs) that I developed over the time with a Magic: The Gathering theme.☆22Jul 15, 2025Updated last year
- Active Directory forensic framework☆16May 18, 2026Updated 5 months ago
- Evasive fork of Donut to generate position-independent shellcode that loads PE Windows payloads from memory☆75Nov 6, 2026Updated last week
- ☆14Oct 7, 2025Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Custom PIC C2 agent for Adaptix with no reflective loader.☆36Updated this week
- SharpCoercer is a .NET 4.8 C# tool that leverages 16 different RPC-based coercion methods to force remote Windows hosts to authenticate t…☆60Jul 13, 2025Updated last year
- Echos is a stealthy C2 traffic emulator built in Rust for Red Teamers. It simulates adversarial beaconing patterns and custom jitter to t…☆35Nov 3, 2026Updated last week
- AdaptixC2 default beacon agent extended to support Crystal Palace loaders.☆66May 4, 2026Updated 6 months ago
- ☆17Sep 21, 2026Updated last month
- Execute commands, in/exfiltrate files using your custom RPC Server☆74Jan 13, 2026Updated 10 months ago
- Havoc C2 BOF port of the KslD.sys BYOVD technique. Credential extraction from lsass via physical memory — no OpenProcess, no auditable AP…☆151Apr 22, 2026Updated 6 months ago
- Tunneling tool for red teaming, designed to run in memory on a windows target and connect back to a Linux VPS so you can proxy tools into…☆54Aug 3, 2026Updated 3 months ago
- A Cobalt Strike RL built with Crystal Palac; module overloading, NtContinue entry transfer, call stack spoofing, sleep masking, and stati…☆272Mar 15, 2026Updated 7 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- A collection of DPAPI hunting and parsing BOFs☆39Mar 3, 2026Updated 8 months ago
- ☆95Aug 5, 2026Updated 3 months ago
- ☆21Oct 22, 2025Updated last year
- Object File (BOF) that demonstrates privilege escalation through a misconfigured AlwaysInstallElevated policy.☆13Sep 17, 2026Updated last month
- Bloodhound alternative - simple ingestor. It generates low-level commands to exploit the AD easily and automatically: learn and control e…☆89Apr 26, 2026Updated 6 months ago
- ☆48Apr 9, 2025Updated last year
- ☆19Sep 1, 2025Updated last year
- Tool to authenticate to an LDAP/S server with a certificate through Schannel written in Rust. 🦀☆78Oct 10, 2026Updated last month
- Better version of SharpPick☆14Aug 29, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆13Nov 29, 2025Updated 11 months ago
- WinRM pass-the-hash BOF with NTLMv2 authentication and signed, encrypted WSMan traffic☆49Updated this week
- C++ Encrypted SSL/TLS REVERSE SHELL, designed to provide secure, encrypted communication between a compromised client and an attacker, wh…☆124Oct 9, 2025Updated last year
- A Sliver C2 module for NetExec☆14Nov 3, 2026Updated last week
- Pure-impacket parallel local-admin discovery via RBCD.☆47Oct 9, 2026Updated last month
- dcsync bof☆54Feb 13, 2026Updated 9 months ago
- Run PowerShell command without invoking powershell.exe☆27Apr 9, 2026Updated 7 months ago
- ☆32Jun 18, 2025Updated last year
- BOF POC of the DSCourier project / invoking WinGet via COM☆90Apr 23, 2026Updated 6 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- A WIP Mythic agent that uses Crystal Palace to build its payloads.☆18Jul 26, 2026Updated 3 months ago
- ☆18Sep 22, 2024Updated 2 years ago
- Kerberos CNAME abuse PoC☆111Jan 27, 2026Updated 9 months ago
- alternative to procdump☆11May 26, 2021Updated 5 years ago
- Snaffler in Python☆124Oct 1, 2026Updated last month
- A Kerberos AP-REQ hijacking tool with DNS unsecure updates abuse.☆139Jan 22, 2025Updated last year
- certinfo is a powerful SSL certificate scraping tool that extracts domain names from SSL certificates of arbitrary hosts. It supports bot…☆11Nov 23, 2025Updated 11 months ago
Are these results useful?