Alternatives and similar repositories for cornershot:

Users that are interested in cornershot are comparing it to the libraries listed below

• ly4k / Pachine
  Python implementation for CVE-2021-42278 (Active Directory Privilege Escalation)
  ☆271Updated 3 years ago
• optiv / Registry-Recon
  Cobalt Strike Aggressor Script that Performs System/AV/EDR Recon
  ☆323Updated 2 years ago
• improsec / SharpEventPersist
  Persistence by writing/reading shellcode from Event Log
  ☆369Updated 2 years ago
• dirkjanm / forest-trust-tools
  Proof-of-concept tools for my AD Forest trust research
  ☆202Updated 8 months ago
• nettitude / SharpWSUS
  ☆449Updated 2 years ago
• Flangvik / AzureC2Relay
  AzureC2Relay is an Azure Function that validates and relays Cobalt Strike beacon traffic by verifying the incoming requests based on a Co…
  ☆214Updated 4 years ago
• Mr-Un1k0d3r / ADHuntTool
  official repo for the AdHuntTool (part of the old RedTeamCSharpScripts repo)
  ☆230Updated 2 years ago
• Cobalt-Strike / Malleable-C2-Profiles
  Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable…
  ☆200Updated 2 months ago
• ShutdownRepo / ShadowCoerce
  MS-FSRVP coercion abuse PoC
  ☆284Updated 3 years ago
• 0xthirteen / StayKit
  Cobalt Strike kit for Persistence
  ☆470Updated 5 years ago
• mitchmoser / SharpShares
  Multithreaded C# .NET Assembly to enumerate accessible network shares in a domain
  ☆339Updated 3 years ago
• iomoath / PowerShx
  Run Powershell without software restrictions.
  ☆285Updated 3 years ago
• hausec / ProxyLogon
  ☆291Updated 8 months ago
• mandiant / ADFSpoof
  ☆381Updated 6 months ago
• mpgn / BackupOperatorToDA
  From an account member of the group Backup Operators to Domain Admin without RDP or WinRM on the Domain Controller
  ☆413Updated last month
• RedSiege / EDD
  Enumerate Domain Data
  ☆325Updated last year
• trustedsec / orpheus
  Bypassing Kerberoast Detections with Modified KDC Options and Encryption Types
  ☆378Updated 2 years ago
• S3cur3Th1sSh1t / SharpNamedPipePTH
  Pass the Hash to a named pipe for token Impersonation
  ☆300Updated last year
• ly4k / PetitPotam
  Python implementation for PetitPotam
  ☆194Updated 3 years ago
• pwn1sher / WMEye
  WMEye is a post exploitation tool that uses WMI Event Filter and MSBuild Execution for lateral movement
  ☆363Updated 3 years ago
• zyn3rgy / LdapRelayScan
  Check for LDAP protections regarding the relay of NTLM authentication
  ☆480Updated 3 months ago
• eksperience / KnockOutlook
  A little tool to play with Outlook
  ☆205Updated 3 years ago
• mdsecactivebreach / Farmer
  ☆363Updated 3 years ago
• jfmaes / SharpZipRunner
  Executes position independent shellcode from an encrypted zip
  ☆301Updated 4 years ago
• outflanknl / Spray-AD
  A Cobalt Strike tool to audit Active Directory user accounts for weak, well known or easy guessable passwords.
  ☆432Updated 2 years ago
• boku7 / azureOutlookC2
  Azure Outlook Command & Control (C2) - Remotely control a compromised Windows Device from your Outlook mailbox. Threat Emulation Tool for…
  ☆475Updated last year
• boku7 / spawn
  Cobalt Strike BOF that spawns a sacrificial process, injects it with shellcode, and executes payload. Built to evade EDR/UserLand hooks b…
  ☆449Updated last year
• 0xthirteen / MoveKit
  Cobalt Strike kit for Lateral Movement
  ☆660Updated 5 years ago
• cube0x0 / SharpSystemTriggers
  Collection of remote authentication triggers in C#
  ☆474Updated 9 months ago
• JamesCooteUK / SharpSphere
  .NET Project for Attacking vCenter
  ☆538Updated 3 years ago