Alternatives and similar repositories for ShuckNT

Users that are interested in ShuckNT are comparing it to the libraries listed below

• almandin / krbjack
  A Kerberos AP-REQ hijacking tool with DNS unsecure updates abuse.
  ☆130Updated 9 months ago
• skelsec / pysnaffler
  pysnaffler
  ☆104Updated 2 months ago
• nickzer0 / RagingRotator
  A tool for carrying out brute force attacks against Office 365, with built in IP rotation use AWS gateways.
  ☆80Updated last year
• truerustyy / wcreddump
  Fully automated windows credentials dumper, for SAM (classic passwords) and WINHELLO (pins). Requires to be run from a linux machine with…
  ☆78Updated 11 months ago
• powerseb / PowerExtract
  ☆119Updated 6 months ago
• fkasler / dolosjs
  Red Team "Drop and Run" NAC (802.1x) Bypass
  ☆75Updated 2 years ago
• synacktiv / CVE-2024-43468
  ☆92Updated 9 months ago
• amauricio / junkshell
  ☆71Updated 7 months ago
• sdcampbell / goscan
  Goscan is a fast TCP scanner I created while learning Golang.
  ☆52Updated 3 years ago
• Ahaz1701 / EvilWorker
  A new AiTM attack framework — based on leveraging service workers — designed to conduct credential phishing campaigns. Thanks to its mini…
  ☆125Updated 2 months ago
• Orange-Cyberdefense / LinikatzV2
  linikatz is a tool to attack AD on UNIX
  ☆147Updated 2 years ago
• DrorDvash / ShellOpsLog
  Automatically create an operation log of your shell! Supports Linux (Bash/Zsh) and Windows (PowerShell/CMD).
  ☆34Updated 7 months ago
• synacktiv / IPSpinner
  IPSpinner works as a local proxy that redirects requests through external services.
  ☆96Updated 7 months ago
• t3hbb / PanGP_Extractor
  Tool to extract username and password of current user from PanGPA in plaintext
  ☆88Updated 10 months ago
• skelsec / adiskreader
  Async Python library to parse local and remote disk images.
  ☆80Updated 3 months ago
• sevagas / Advanced_Initial_access_in_2024_OffensiveX
  Resources linked to my presentation at OffensiveX in Athens in June 2024 on the topic "Breach the Gat, Advanced Initial Access in 2024"
  ☆145Updated last year
• synacktiv / Prox-Ez
  ☆97Updated 8 months ago
• HuskyHacks / SharpTokenFinder
  C# implementation of TokenFinder. Steal M365 access tokens from Office Desktop apps
  ☆139Updated last year
• bitsadmin / lofl
  Living Off the Foreign Land setup scripts
  ☆71Updated 7 months ago
• OmriBaso / BesoToken
  A tool to Impersonate logged on users without touching LSASS (Including non-Interactive sessions).
  ☆93Updated 2 years ago
• cisagov / snafflepy
  Snaffler reimplementation in Python - https://github.com/SnaffCon/Snaffler
  ☆112Updated 3 months ago
• RedSiege / Chromatophore
  Utilities for obfuscating shellcode
  ☆94Updated last month
• danti1988 / adcshunter
  Uses rpcdump to locate the ADCS server, and identify if ESC8 is vulnerable from unauthenticated perspective.
  ☆82Updated last year
• optiv / KnockKnock
  Enumerate valid users within Microsoft Teams and OneDrive with clean output.
  ☆58Updated 8 months ago
• dadevel / mssql-spider
  Automated exploitation of MSSQL servers at scale
  ☆125Updated last week
• api0cradle / RedTeamScripts
  Just some random Red Team Scripts that can be useful
  ☆152Updated last year
• ustayready / ShredHound
  Small utility to chunk up a large BloodHound JSON file into smaller files for importing.
  ☆96Updated 2 years ago
• SpecterOps / cred1py
  A Python POC for CRED1 over SOCKS5
  ☆158Updated last year
• AetherBlack / abuseACL
  A python script to automatically list vulnerable Windows ACEs/ACLs.
  ☆61Updated 4 months ago
• andrecrafts / Bloodhound-query-legacy2ce
  A Python based tool to convert custom queries from Legacy BloodHound to BloodHound CE format, with the option to directly upload them to …
  ☆31Updated 3 weeks ago