Kevin Mandia, Founder of Mandiant, to Deliver Featured Keynote at SO-CON 2026. Learn More
Back to Resource Center
Open-source Tools

SharpSCCM

SharpSCCM is a post-exploitation tool designed to leverage Microsoft Endpoint Configuration Manager (a.k.a. ConfigMgr, formerly SCCM) for lateral movement and credential gathering without requiring access to the SCCM administration console GUI.

SharpSCCM was initially created to execute user hunting and lateral movement functions ported from PowerSCCM (by @harmj0y, @jaredcatkinson, @enigma0x3, and @mattifestation) and now contains additional functionality to gather credentials and abuse newly discovered attack primitives for coercing NTLM authentication in SCCM sites where automatic site-wide client push installation is enabled.

Download on GitHub
SharpSCCM

Explore other tools

BloodHound Community Edition

Manage Identity Attack Paths across your hybrid environment and remove the adversary’s favorite target.

BloodHound Community Edition

Read more

Nemesis 2.0

Nemesis 2.0 functions as an "offensive VirusTotal," automatically processing files collected during security assessments through an extensive pipeline of specialized analyzers.

Nemesis 2.0

Read more

Ghostwriter

Ghostwriter is a Django web app for red teams to track projects, clients, assets, reports, and evidence.

Ghostwriter

Read more

Mythic

Mythic is an open-source Command and Control (C2) framework designed around a microservice architecture.

Mythic

Read more

Join the conversation

Learn from others and share your story on the BloodHoundGang Slack Community

More info

You might also be interested in

Case Studies

Regional Hospital System Fills Gap in Identity Risk Reduction

A U.S. Healthcare Organization Eliminated Hidden Privilege Escalation Chains with BloodHound Enterprise

Read more

Cover of the State of APM report
White Papers

The State of Attack Path Management

Our inaugural report highlights why Identity Security is increasingly complex, and why it's difficult to execute without Attack Path Management. We're shifting the conversation from static checklists to the dynamic attack graph.

Read more

Filling Security Gaps Whitepaper cover image
White Papers

Applying Attack Path Management to Identity Security

It’s no secret that security is getting more difficult. Evolving threats like AI-enabled attackers, the proliferation of ransomware-as-a-service, and nation-state supported groups provide nearly seemingly infinite resources to adversaries. The continued accumulation of identity tech debt through rapid digital transformation efforts has expanded the attack surface significantly. Nonhuman identities have overtaken human identities in volume, further exacerbating the challenge of understanding threats to the enterprise.

Read more