Alternatives and similar repositories for PrintNightmare

Users that are interested in PrintNightmare are comparing it to the libraries listed below

• sailay1996 / delete2SYSTEM
  Weaponizing for Arbitrary Files/Directories Delete bugs to Get NT AUTHORITY\SYSTEM
  ☆123Updated 5 years ago
• AlmondOffSec / PoCs
  Proof-of-concept code for various bugs
  ☆111Updated 10 months ago
• decoder-it / NetworkServiceExploit
  POC for NetworkService PrivEsc
  ☆125Updated 5 years ago
• chompie1337 / SIGRed_RCE_PoC
  ☆266Updated 2 years ago
• irsl / CVE-2020-1313
  Proof of concept exploit of Windows Update Orchestrator Service Elevation of Privilege Vulnerability
  ☆124Updated 5 years ago
• xct / diaghub
  Loads a custom dll in system32 via diaghub.
  ☆76Updated 5 years ago
• goichot / CVE-2020-3153
  Cisco AnyConnect < 4.8.02042 privilege escalation through path traversal
  ☆106Updated 5 years ago
• Cerbersec / DomainBorrowingC2
  ☆170Updated 4 years ago
• jbaines-r7 / shakeitoff
  Windows MSI Installer LPE (CVE-2021-43883)
  ☆78Updated 3 years ago
• cube0x0 / CVE-2020-1472
  ☆38Updated 4 years ago
• gitjdm / dumper2020
  Yet another LSASS dumper
  ☆76Updated 4 years ago
• FSecureLABS / incognito
  One Token To Rule Them All https://labs.mwrinfosecurity.com/blog/incognito-v2-0-released/
  ☆153Updated 5 years ago
• boku7 / winx64-InjectAllProcessesMeterpreter-Shellcode
  64bit Windows 10 shellcode that injects all processes with Meterpreter reverse shells.
  ☆130Updated 2 years ago
• Cobalt-Strike / sleep_python_bridge
  This project is 'bridge' between the sleep and python language. It allows the control of a Cobalt Strike teamserver through python withou…
  ☆185Updated 3 weeks ago
• S3cur3Th1sSh1t / NamedPipePTH
  Pass the Hash to a named pipe for token Impersonation
  ☆145Updated 4 years ago
• checkymander / Carbuncle
  Tool for interacting with outlook interop during red team engagements
  ☆146Updated 4 years ago
• rmdavy / HeapsOfFun
  AMSI Bypass Via the Heap
  ☆107Updated 4 years ago
• decoder-it / juicy_2
  juicypotato for win10 > 1803 & win server 2019
  ☆97Updated 4 years ago
• sailay1996 / RpcSsImpersonator
  Privilege Escalation Via RpcSs svc
  ☆180Updated 3 years ago
• darkr4y / SharpOffensiveShell
  A sort of simple shell which support multiple protocols.
  ☆100Updated 5 years ago
• EspressoCake / DLL-Hijack-Search-Order-BOF
  DLL Hijack Search Order Enumeration BOF
  ☆151Updated 3 years ago
• waldo-irc / CVE-2021-21551
  Exploit to SYSTEM for CVE-2021-21551
  ☆237Updated 4 years ago
• GoSecure / ldap-scanner
  Checks for signature requirements over LDAP
  ☆97Updated 2 years ago
• sourceincite / CVE-2021-24085
  ☆71Updated 4 years ago
• lexfo / rpc2socks
  Post-exploit tool that enables a SOCKS tunnel via a Windows host using an extensible custom RPC proto over SMB through a named pipe.
  ☆190Updated 4 years ago
• ioncodes / CVE-2020-16938
  Bypassing NTFS permissions to read any files as unprivileged user.
  ☆188Updated 4 years ago
• aahmad097 / BadOutlook
  (kinda) Malicious Outlook Reader
  ☆136Updated 4 years ago
• ajpc500 / NimlineWhispers
  A very proof-of-concept port of InlineWhispers for using syscalls in Nim projects.
  ☆166Updated 3 years ago
• forrest-orr / DoubleStar
  A personalized/enhanced re-creation of the Darkhotel "Double Star" APT exploit chain with a focus on Windows 8.1 and mixed with some of m…
  ☆146Updated 3 years ago
• sailay1996 / SpoolTrigger
  Weaponizing for privileged file writes bugs with PrintNotify Service
  ☆134Updated 3 years ago