Prepouce / CoercedPotatoLinks
A Windows potato to privesc
☆389Updated last year
Alternatives and similar repositories for CoercedPotato
Users that are interested in CoercedPotato are comparing it to the libraries listed below
Sorting:
- Abuse Impersonate Privilege from Service to SYSTEM like other potatoes do☆400Updated 2 years ago
- Fileless atexec, no more need for port 445☆404Updated last year
- ☆232Updated last year
- PoC Exploit for the NTLM reflection SMB flaw.☆615Updated last week
- Credential Guard Bypass Via Patching Wdigest Memory☆335Updated 2 years ago
- A list of python tools to help create an OPSEC-safe Cobalt Strike profile.☆504Updated 7 months ago
- ☆339Updated 2 months ago
- AdaptixFramework Extension Kit☆355Updated this week
- A Tool that aims to evade av with binary padding☆160Updated last year
- This is the tool to dump the LSASS process on modern Windows 11☆538Updated 2 months ago
- PE to shellcode☆258Updated last year
- C2 redirector base on caddy☆210Updated last year
- An alternative screenshot capability for Cobalt Strike that uses WinAPI and does not perform a fork & run. Screenshot downloaded in memor…☆486Updated last month
- Escalate Service Account To LocalSystem via Kerberos☆401Updated 2 years ago
- Windows Token Stealing Expert☆482Updated 2 years ago
- Bypassing UAC with SSPI Datagram Contexts☆461Updated 2 years ago
- UAC Bypass By Abusing Kerberos Tickets☆506Updated 2 years ago
- Local privilege escalation from SeImpersonatePrivilege using EfsRpc.☆335Updated 3 years ago
- DeadPotato is a windows privilege escalation utility from the Potato family of exploits, leveraging the SeImpersonate right to obtain SYS…☆453Updated last year
- Positional Independent Code to extract clear text password from mstsc.exe using API Hooking via HWBP.☆249Updated last year
- A beacon object file implementation of PoolParty Process Injection Technique.☆430Updated 2 years ago
- Reproducing Spyboy technique, which involves terminating all EDR/XDR/AVs processes by abusing the zam64.sys driver☆293Updated 8 months ago
- Some Service DCOM Object and SeImpersonatePrivilege abuse.☆370Updated 3 years ago
- Terminate AV/EDR Processes using kernel driver☆351Updated 2 years ago
- Go shellcode loader that combines multiple evasion techniques☆386Updated 2 years ago
- Local privilege escalation via PetitPotam (Abusing impersonate privileges).☆450Updated 2 years ago
- Active Directory reconnaissance and exploitation for Red Teams via the Active Directory Web Services (ADWS).☆583Updated last year
- ☆322Updated 3 years ago
- micr0shell is a Python script that dynamically generates Windows X64 PIC Null-Free reverse shell shellcode.☆207Updated last year
- CPP AV/EDR Killer☆468Updated 2 years ago