Helixo32 / GetSystem-LCILinks
GetSystem-LCI is a PowerShell script to escalate privileges from Administrator to NT AUTHORITY\SYSTEM by abusing LanguageComponentsInstaller.
☆35Updated last year
Alternatives and similar repositories for GetSystem-LCI
Users that are interested in GetSystem-LCI are comparing it to the libraries listed below
Sorting:
- Pure PowerShell port of PassTheCert tool to authenticate to an LDAP/S server with a certificate through Schannel☆52Updated 8 months ago
- Source code and examples for PassiveAggression☆64Updated last year
- Deploy a phishing infrastructure on the fly.☆78Updated last year
- Extract registry and NTDS secrets from local or remote disk images☆44Updated 9 months ago
- Automatically extract and decrypt all configured scanning credentials of a Lansweeper instance.☆43Updated last year
- Generate password spraying lists based on the pwdLastSet-attribute of users.☆55Updated 2 years ago
- Quick and dirty PowerShell script to abuse the overly permissive capabilities of the SYSTEM user in a child domain on the Public Key Serv…☆29Updated 2 years ago
- A tool to abuse weak permissions of Active Directory Discretionary Access Control Lists (DACLs) and Access Control Entries (ACEs)☆61Updated 5 months ago
- Tamper Active Directory user attributes to collect their hashes with MS-SNTP☆41Updated 11 months ago
- Scripts I use to deploy Havoc on Linode and setup categorization and SSL☆42Updated last year
- ☆52Updated last year
- Fully automated windows credentials dumper, for SAM (classic passwords) and WINHELLO (pins). Requires to be run from a linux machine with…☆79Updated last year
- A C# tool for requesting certificates from ADCS using DCOM over SMB. This tool allows you to remotely request X.509 certificates from CA …☆162Updated last month
- ☆44Updated last year
- ☆57Updated 10 months ago
- Tool to extract username and password of current user from PanGPA in plaintext☆88Updated 11 months ago
- Permanently disable EDRs as local admin☆122Updated 2 months ago
- ☆50Updated 8 months ago
- SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Dire…☆33Updated last year
- Lifetime AMSI bypass.☆35Updated 8 months ago
- A small red team course☆40Updated 2 years ago
- Example code samples from our ScriptBlock Smuggling Blog post☆92Updated last year
- Launches a limited shell using PowerShell Runspaces with an optional AMSI Bypass. Does not invoke Powershell.exe☆13Updated 2 years ago
- Automated Evilginx phishlet creator Extension for Burpsuite☆59Updated 11 months ago
- Client-side Encrypted Upload Server Python Script☆65Updated 5 months ago
- Most Responder's configuration power in your hand.☆51Updated 11 months ago
- Sniffing files generator☆59Updated 9 months ago
- Situational Awareness script to identify how and where to run implants☆67Updated last year
- Remote Template Injection Toolkit☆44Updated last year
- Enumerate the Domain for Readable and Writable Shares☆23Updated last month