How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
Rid_enum is a null session RID cycle attack for brute forcing domain controllers.
The main features of trustedsec/ridenum are: Windows Security Utilities.
Open-source alternatives to trustedsec/ridenum include: ionuttbara/windows-defender-remover — This project is a Windows security removal tool designed to permanently disable and delete antivirus services and… byt3bl33d3r/deathstar — Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin… dafthack/mailsniper — MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific… fireeye/commando-vm — Commando-VM is a Windows penetration testing distribution and offensive security toolkit. It provides a specialized… gdssecurity/windows-exploit-suggester — Windows-Exploit-Suggester is a security audit tool designed to scan Windows systems for outdated components and… alessandroz/lazagne — LaZagne is a cross-platform credential recovery tool designed to extract passwords and secrets from operating systems,…
This project is a Windows security removal tool designed to permanently disable and delete antivirus services and security monitoring components from the operating system. It functions as a system performance optimizer and policy manager to remove security mitigations and clear policy files that restrict application execution. The tool includes a Windows ISO customizer that embeds configuration files and unattended installation scripts into bootable images. This allows security features to be bypassed and services to be disabled before the initial system boot. The software covers broad capab
Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive TTPs.
MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.
LaZagne is a cross-platform credential recovery tool designed to extract passwords and secrets from operating systems, browsers, and applications. It functions as a security utility for retrieving stored credentials from compromised systems during penetration testing. The tool provides capabilities for decrypting domain credentials and extracting sensitive data from system storage, including memory dumps, credential managers, keychains, and password hashes. It recovers stored passwords from common software by accessing plaintext files, APIs, and local databases. The project supports digital