Alternatives and similar repositories for PrintNightmare:

Users that are interested in PrintNightmare are comparing it to the libraries listed below

• decoder-it / NetworkServiceExploit
  POC for NetworkService PrivEsc
  ☆123Updated 4 years ago
• xct / diaghub
  Loads a custom dll in system32 via diaghub.
  ☆70Updated 4 years ago
• sailay1996 / delete2SYSTEM
  Weaponizing for Arbitrary Files/Directories Delete bugs to Get NT AUTHORITY\SYSTEM
  ☆122Updated 4 years ago
• mdsecactivebreach / firewalker
  ☆147Updated 4 years ago
• jbaines-r7 / shakeitoff
  Windows MSI Installer LPE (CVE-2021-43883)
  ☆77Updated 3 years ago
• AlmondOffSec / PoCs
  Proof-of-concept code for various bugs
  ☆108Updated 3 months ago
• gitjdm / dumper2020
  Yet another LSASS dumper
  ☆76Updated 4 years ago
• rookuu / BOFs
  Collection of beacon object files for use with Cobalt Strike to facilitate 🐚.
  ☆174Updated 4 years ago
• 0xB455 / AmsiBypass
  C# PoC implementation for bypassing AMSI via in memory patching
  ☆65Updated 4 years ago
• EncodeGroup / BOF-RegSave
  Dumping SAM / SECURITY / SYSTEM registry hives with a Beacon Object File
  ☆191Updated 4 years ago
• checkymander / Carbuncle
  Tool for interacting with outlook interop during red team engagements
  ☆144Updated 3 years ago
• FSecureLABS / incognito
  One Token To Rule Them All https://labs.mwrinfosecurity.com/blog/incognito-v2-0-released/
  ☆148Updated 4 years ago
• Barbarisch / forkatz
  credential dump using foreshaw technique using SeTrustedCredmanAccessPrivilege
  ☆122Updated 3 years ago
• xenoscr / SysWhispers2
  AV/EDR evasion via direct system calls.
  ☆107Updated last year
• guervild / BOFs
  Cobalt Strike Beacon Object Files
  ☆160Updated 2 years ago
• S3cur3Th1sSh1t / NamedPipePTH
  Pass the Hash to a named pipe for token Impersonation
  ☆140Updated 3 years ago
• Kevin-Robertson / Sharpmad
  C# version of Powermad
  ☆158Updated last year
• Cerbersec / DomainBorrowingC2
  ☆166Updated 3 years ago
• jfmaes / SharpNukeEventLog
  nuke that event log using some epic dinvoke fu
  ☆116Updated 3 years ago
• irsl / CVE-2020-1313
  Proof of concept exploit of Windows Update Orchestrator Service Elevation of Privilege Vulnerability
  ☆121Updated 4 years ago
• EspressoCake / DLL-Hijack-Search-Order-BOF
  DLL Hijack Search Order Enumeration BOF
  ☆145Updated 3 years ago
• decoder-it / juicy_2
  juicypotato for win10 > 1803 & win server 2019
  ☆96Updated 3 years ago
• netbiosX / AMSI-Provider
  A fake AMSI Provider which can be used for persistence.
  ☆147Updated 3 years ago
• snovvcrash / MirrorDump
  Another LSASS dumping tool that uses a dynamically compiled LSA plugin to grab an lsass handle and API hooking for capturing the dump in…
  ☆102Updated 2 years ago
• sailay1996 / RpcSsImpersonator
  Privilege Escalation Via RpcSs svc
  ☆176Updated 3 years ago
• sailay1996 / WerTrigger
  Weaponizing for privileged file writes bugs with windows problem reporting
  ☆215Updated 2 years ago
• paranoidninja / PIC-Get-Privileges
  Building and Executing Position Independent Shellcode from Object Files in Memory
  ☆154Updated 4 years ago
• last-byte / HppDLL
  Source code for HppDLL - local password dumping using MsvpPasswordValidate hooks
  ☆2Updated 4 years ago
• boku7 / whereami
  Cobalt Strike Beacon Object File (BOF) that uses handwritten shellcode to return the process Environment strings without touching any DLL…
  ☆166Updated last year
• outflanknl / WdToggle
  A Beacon Object File (BOF) for Cobalt Strike which uses direct system calls to enable WDigest credential caching.
  ☆215Updated last year