Alternatives and similar repositories for PrintNightmare:

Users that are interested in PrintNightmare are comparing it to the libraries listed below

• decoder-it / NetworkServiceExploit
  POC for NetworkService PrivEsc
  ☆124Updated 4 years ago
• rookuu / BOFs
  Collection of beacon object files for use with Cobalt Strike to facilitate 🐚.
  ☆174Updated 3 years ago
• sailay1996 / delete2SYSTEM
  Weaponizing for Arbitrary Files/Directories Delete bugs to Get NT AUTHORITY\SYSTEM
  ☆121Updated 4 years ago
• gitjdm / dumper2020
  Yet another LSASS dumper
  ☆76Updated 4 years ago
• irsl / CVE-2020-1313
  Proof of concept exploit of Windows Update Orchestrator Service Elevation of Privilege Vulnerability
  ☆121Updated 4 years ago
• jbaines-r7 / shakeitoff
  Windows MSI Installer LPE (CVE-2021-43883)
  ☆76Updated 3 years ago
• mdsecactivebreach / firewalker
  ☆147Updated 4 years ago
• AlmondOffSec / PoCs
  Proof-of-concept code for various bugs
  ☆107Updated 2 months ago
• xct / diaghub
  Loads a custom dll in system32 via diaghub.
  ☆69Updated 4 years ago
• sailay1996 / RpcSsImpersonator
  Privilege Escalation Via RpcSs svc
  ☆172Updated 3 years ago
• Kevin-Robertson / Sharpmad
  C# version of Powermad
  ☆158Updated last year
• boku7 / winx64-InjectAllProcessesMeterpreter-Shellcode
  64bit Windows 10 shellcode that injects all processes with Meterpreter reverse shells.
  ☆127Updated last year
• outflanknl / WdToggle
  A Beacon Object File (BOF) for Cobalt Strike which uses direct system calls to enable WDigest credential caching.
  ☆213Updated last year
• rmdavy / HeapsOfFun
  AMSI Bypass Via the Heap
  ☆105Updated 4 years ago
• xenoscr / SysWhispers2
  AV/EDR evasion via direct system calls.
  ☆107Updated last year
• S3cur3Th1sSh1t / NamedPipePTH
  Pass the Hash to a named pipe for token Impersonation
  ☆140Updated 3 years ago
• 0xB455 / AmsiBypass
  C# PoC implementation for bypassing AMSI via in memory patching
  ☆65Updated 4 years ago
• EncodeGroup / BOF-RegSave
  Dumping SAM / SECURITY / SYSTEM registry hives with a Beacon Object File
  ☆188Updated 4 years ago
• rxwx / cs-rdll-ipc-example
  Example code for using named pipe output with beacon ReflectiveDLLs
  ☆111Updated 4 years ago
• guervild / BOFs
  Cobalt Strike Beacon Object Files
  ☆158Updated 2 years ago
• cube0x0 / ParallelSyscalls
  C# version of MDSec's ParallelSyscalls
  ☆139Updated 3 years ago
• rvrsh3ll / NoMSBuild
  MSBuild without MSbuild.exe
  ☆129Updated 4 years ago
• FSecureLABS / incognito
  One Token To Rule Them All https://labs.mwrinfosecurity.com/blog/incognito-v2-0-released/
  ☆147Updated 4 years ago
• Cerbersec / DomainBorrowingC2
  ☆165Updated 3 years ago
• EspressoCake / DLL-Hijack-Search-Order-BOF
  DLL Hijack Search Order Enumeration BOF
  ☆141Updated 3 years ago
• checkymander / Carbuncle
  Tool for interacting with outlook interop during red team engagements
  ☆144Updated 3 years ago