blackorbird / PrintNightmare
☆52Updated 3 years ago
Alternatives and similar repositories for PrintNightmare:
Users that are interested in PrintNightmare are comparing it to the libraries listed below
- POC for NetworkService PrivEsc☆125Updated 4 years ago
- Collection of beacon object files for use with Cobalt Strike to facilitate 🐚.☆174Updated 4 years ago
- Loads a custom dll in system32 via diaghub.☆71Updated 5 years ago
- Weaponizing for Arbitrary Files/Directories Delete bugs to Get NT AUTHORITY\SYSTEM☆123Updated 4 years ago
- credential dump using foreshaw technique using SeTrustedCredmanAccessPrivilege☆123Updated 3 years ago
- Yet another LSASS dumper☆76Updated 4 years ago
- ☆149Updated 4 years ago
- Windows MSI Installer LPE (CVE-2021-43883)☆76Updated 3 years ago
- AMSI Bypass Via the Heap☆106Updated 4 years ago
- C# PoC implementation for bypassing AMSI via in memory patching☆65Updated 4 years ago
- Cisco AnyConnect < 4.8.02042 privilege escalation through path traversal☆106Updated 4 years ago
- Tool for interacting with outlook interop during red team engagements☆144Updated 3 years ago
- Proof of concept exploit of Windows Update Orchestrator Service Elevation of Privilege Vulnerability☆121Updated 4 years ago
- DLL Hijack Search Order Enumeration BOF☆147Updated 3 years ago
- Collection of CobaltStrike beacon object files☆103Updated 3 years ago
- Cobalt Strike Beacon Object Files☆160Updated 2 years ago
- Proof-of-concept code for various bugs☆109Updated 5 months ago
- juicypotato for win10 > 1803 & win server 2019☆95Updated 4 years ago
- 64bit Windows 10 shellcode that injects all processes with Meterpreter reverse shells.☆129Updated 2 years ago
- Dumping SAM / SECURITY / SYSTEM registry hives with a Beacon Object File☆198Updated 4 years ago
- Pass the Hash to a named pipe for token Impersonation☆143Updated 3 years ago
- Another LSASS dumping tool that uses a dynamically compiled LSA plugin to grab an lsass handle and API hooking for capturing the dump in…☆102Updated 2 years ago
- A fake AMSI Provider which can be used for persistence.☆148Updated 3 years ago
- C# version of Powermad☆164Updated last year
- AV/EDR evasion via direct system calls.☆108Updated last year
- Checks for signature requirements over LDAP☆96Updated 2 years ago
- Perform DCSync operation without mimikatz☆143Updated 5 months ago
- nuke that event log using some epic dinvoke fu☆118Updated 3 years ago
- ☆72Updated last year
- Proof of concept Beacon Object File (BOF) that attempts to detect userland hooks in place by AV/EDR☆99Updated 3 years ago