OffSec / Python3 / Rust / Go / Docker
certsync. Dump NTDS with golden certificates and UnPAC the hash
651dploot. DPAPI looting remotely and locally in Python
552acltoolkit. ACL abuse swiss-knife
129impersonate-rs. Rusty Impersonate
107BloodHoundCustomQueries. My BloodHound custom queries
27acherus. Acherus, The Docker Hold, is a containerized hacking environment gathering many tools and resources
16ntdsutil.py. Dump NTDS remotely with ntdsutil.exe
6dotfiles. Shell
3impacket. Impacket is a collection of Python classes for working with network protocols.
3MetaFinder. Search for documents in a domain through Search Engines (Google, Bing and Baidu). The objective is to extract metadata
2DonPAPI. Dumping DPAPI credz remotely
1zblurx.
1dhcpp. DHCP enumeration tool
1lsassy. Extract credentials from lsass remotely
1