Alternatives and similar repositories for PrintNightmare:

Users that are interested in PrintNightmare are comparing it to the libraries listed below

• decoder-it / NetworkServiceExploit
  POC for NetworkService PrivEsc
  ☆125Updated 4 years ago
• xct / diaghub
  Loads a custom dll in system32 via diaghub.
  ☆71Updated 5 years ago
• gitjdm / dumper2020
  Yet another LSASS dumper
  ☆76Updated 4 years ago
• sailay1996 / delete2SYSTEM
  Weaponizing for Arbitrary Files/Directories Delete bugs to Get NT AUTHORITY\SYSTEM
  ☆122Updated 4 years ago
• AlmondOffSec / PoCs
  Proof-of-concept code for various bugs
  ☆108Updated 4 months ago
• 0xB455 / AmsiBypass
  C# PoC implementation for bypassing AMSI via in memory patching
  ☆65Updated 4 years ago
• irsl / CVE-2020-1313
  Proof of concept exploit of Windows Update Orchestrator Service Elevation of Privilege Vulnerability
  ☆121Updated 4 years ago
• jbaines-r7 / shakeitoff
  Windows MSI Installer LPE (CVE-2021-43883)
  ☆77Updated 3 years ago
• Cerbersec / DomainBorrowingC2
  ☆166Updated 3 years ago
• guervild / BOFs
  Cobalt Strike Beacon Object Files
  ☆160Updated 2 years ago
• S3cur3Th1sSh1t / NamedPipePTH
  Pass the Hash to a named pipe for token Impersonation
  ☆141Updated 3 years ago
• rookuu / BOFs
  Collection of beacon object files for use with Cobalt Strike to facilitate 🐚.
  ☆174Updated 4 years ago
• pwn1sher / CS-BOFs
  Collection of CobaltStrike beacon object files
  ☆102Updated 3 years ago
• EspressoCake / DLL-Hijack-Search-Order-BOF
  DLL Hijack Search Order Enumeration BOF
  ☆147Updated 3 years ago
• ricardojba / Invoke-noPac
  .Net Assembly loader for the [CVE-2021-42287 - CVE-2021-42278] Scanner & Exploit noPac
  ☆61Updated 2 years ago
• xenoscr / SysWhispers2
  AV/EDR evasion via direct system calls.
  ☆107Updated last year
• EncodeGroup / BOF-RegSave
  Dumping SAM / SECURITY / SYSTEM registry hives with a Beacon Object File
  ☆193Updated 4 years ago
• goichot / CVE-2020-3153
  Cisco AnyConnect < 4.8.02042 privilege escalation through path traversal
  ☆106Updated 4 years ago
• mdsecactivebreach / firewalker
  ☆148Updated 4 years ago
• rmdavy / HeapsOfFun
  AMSI Bypass Via the Heap
  ☆106Updated 4 years ago
• outflanknl / WdToggle
  A Beacon Object File (BOF) for Cobalt Strike which uses direct system calls to enable WDigest credential caching.
  ☆215Updated last year
• Kevin-Robertson / Sharpmad
  C# version of Powermad
  ☆160Updated last year
• jas502n / mimikat_ssp
  Security Support Provider Interface
  ☆46Updated 4 years ago
• decoder-it / juicy_2
  juicypotato for win10 > 1803 & win server 2019
  ☆96Updated 4 years ago
• last-byte / HppDLL
  Source code for HppDLL - local password dumping using MsvpPasswordValidate hooks
  ☆3Updated 4 years ago
• synacktiv / AMSI-Bypass
  Lists of AMSI triggers (VBA, JScript / VBScript)
  ☆33Updated 5 years ago
• SolomonSklash / SyscallPOC
  Shellcode injection POC using syscalls.
  ☆115Updated 4 years ago
• Dliv3 / SharpGPO
  A Red Team tool for remotely manipulating Group Policy Object(GPO), Organizational Unit(OU), GPLink and Security Filtering
  ☆111Updated 3 years ago
• m57 / cobaltstrike_bofs
  My CobaltStrike BOFS
  ☆162Updated 2 years ago
• uf0o / CVE-2020-17382
  PoC exploits for CVE-2020-17382
  ☆114Updated 4 years ago