0neAtSec / EfsPotato-1Links
MS-EFSR EfsRpcOpenFileRaw with SeImpersonatePrivilege local privalege escalation vulnerability
☆19Updated 3 years ago
Alternatives and similar repositories for EfsPotato-1
Users that are interested in EfsPotato-1 are comparing it to the libraries listed below
Sorting:
- ☆46Updated 4 years ago
- Search msDS-AllowedToActOnBehalfOfOtherIdentity☆35Updated 3 years ago
- PortBender修改为exe版本☆28Updated last year
- 通过websocket在IIS8(Windows Server 2012)以上实现socks5代理☆89Updated last year
- Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user; Adding the sam_the_admin_maq when MachineAccoun…☆22Updated last year
- PrintSpoofer的反射dll实现,结合Cobalt Strike使用☆88Updated 3 years ago
- CVE-2020-1472 C++☆83Updated 2 years ago
- 替代PrintBug用于本地提权的新方式,主要利用MS-EFSR协议中的接口函数 借鉴了Potitpotam中对于EFSR协议的利用,实现了本地提权的一系列方式 Drawing on the use of the EFSR protocol in Potitpotam, …☆149Updated 3 years ago
- BOF implementation of delete self poc that delete a locked executable or a currently running file from disk by its pid, path, or the curr…☆76Updated last year
- Cobalt Strike BOF that Add an admin user☆77Updated 2 years ago
- If you only have hash, you can still operate exchange☆75Updated 3 years ago
- Cobalt Strike BOF that Add a user to localgroup by samr☆130Updated 2 years ago
- ☆15Updated last year
- ☆49Updated 2 years ago
- CrackMapExec extension module/protocol support☆42Updated last year
- command execute without 445 port☆52Updated 3 years ago
- cmd2shellcode☆79Updated 4 years ago
- A method of bypassing EDR's active projection DLL's by preventing entry point exection☆23Updated 4 years ago
- ☆3Updated 2 years ago
- ☆91Updated 2 years ago
- 在权限足够的情况下弹出system权限的cmd命令行,包含exe和dll两种文件类型,可用于一些可能存在本地提权漏洞的测试。☆33Updated 3 years ago
- Lsass memory dump.☆53Updated last year
- (批量化改造)sharpwmi是一个基于rpc的横向移动工具,具有上传文件和执行命令功能。☆108Updated 4 years ago
- Zerologon自动化脚本☆90Updated last year
- 使用Csharp实现自动修改注册表键并强制锁屏,使其可被抓取明文密码。☆30Updated 4 years ago
- dump lsass☆37Updated 3 years ago
- MSSQL CLR for pentest.☆54Updated last year
- 密码收集☆58Updated 3 years ago
- ☆100Updated 2 years ago
- Windows Api调用,用来绕过杀软添加用户☆22Updated 4 years ago