Alternatives and similar repositories for PrintNightmare:

Users that are interested in PrintNightmare are comparing it to the libraries listed below

• decoder-it / NetworkServiceExploit
  POC for NetworkService PrivEsc
  ☆126Updated 5 years ago
• xct / diaghub
  Loads a custom dll in system32 via diaghub.
  ☆74Updated 5 years ago
• sailay1996 / delete2SYSTEM
  Weaponizing for Arbitrary Files/Directories Delete bugs to Get NT AUTHORITY\SYSTEM
  ☆123Updated 4 years ago
• gitjdm / dumper2020
  Yet another LSASS dumper
  ☆76Updated 4 years ago
• 0xB455 / AmsiBypass
  C# PoC implementation for bypassing AMSI via in memory patching
  ☆65Updated 4 years ago
• mdsecactivebreach / firewalker
  ☆151Updated 4 years ago
• rmdavy / HeapsOfFun
  AMSI Bypass Via the Heap
  ☆107Updated 4 years ago
• snovvcrash / MirrorDump
  Another LSASS dumping tool that uses a dynamically compiled LSA plugin to grab an lsass handle and API hooking for capturing the dump in…
  ☆103Updated 3 years ago
• jbaines-r7 / shakeitoff
  Windows MSI Installer LPE (CVE-2021-43883)
  ☆77Updated 3 years ago
• AlmondOffSec / PoCs
  Proof-of-concept code for various bugs
  ☆110Updated 6 months ago
• sailay1996 / RpcSsImpersonator
  Privilege Escalation Via RpcSs svc
  ☆177Updated 3 years ago
• cube0x0 / ParallelSyscalls
  C# version of MDSec's ParallelSyscalls
  ☆141Updated 3 years ago
• guervild / BOFs
  Cobalt Strike Beacon Object Files
  ☆161Updated 3 years ago
• darkr4y / SharpOffensiveShell
  A sort of simple shell which support multiple protocols.
  ☆99Updated 5 years ago
• checkymander / Carbuncle
  Tool for interacting with outlook interop during red team engagements
  ☆144Updated 3 years ago
• boku7 / winx64-InjectAllProcessesMeterpreter-Shellcode
  64bit Windows 10 shellcode that injects all processes with Meterpreter reverse shells.
  ☆129Updated 2 years ago
• outflanknl / FindObjects-BOF
  A Cobalt Strike Beacon Object File (BOF) project which uses direct system calls to enumerate processes for specific loaded modules or pro…
  ☆268Updated 2 years ago
• S3cur3Th1sSh1t / NamedPipePTH
  Pass the Hash to a named pipe for token Impersonation
  ☆143Updated 4 years ago
• EncodeGroup / BOF-RegSave
  Dumping SAM / SECURITY / SYSTEM registry hives with a Beacon Object File
  ☆198Updated 4 years ago
• pwn1sher / CS-BOFs
  Collection of CobaltStrike beacon object files
  ☆103Updated 3 years ago
• irsl / CVE-2020-1313
  Proof of concept exploit of Windows Update Orchestrator Service Elevation of Privilege Vulnerability
  ☆121Updated 4 years ago
• rookuu / BOFs
  Collection of beacon object files for use with Cobalt Strike to facilitate 🐚.
  ☆177Updated 4 years ago
• bytecod3r / Cobaltstrike-Aggressor-Scripts-Collection
  Collection of tested Cobaltstrike aggressor scripts.
  ☆116Updated 5 years ago
• SolomonSklash / SyscallPOC
  Shellcode injection POC using syscalls.
  ☆116Updated 4 years ago
• GoSecure / ldap-scanner
  Checks for signature requirements over LDAP
  ☆97Updated 2 years ago
• Kevin-Robertson / Sharpmad
  C# version of Powermad
  ☆165Updated last year
• cube0x0 / CVE-2020-1472
  ☆38Updated 4 years ago
• EspressoCake / DLL-Hijack-Search-Order-BOF
  DLL Hijack Search Order Enumeration BOF
  ☆147Updated 3 years ago
• rxwx / cs-rdll-ipc-example
  Example code for using named pipe output with beacon ReflectiveDLLs
  ☆116Updated 4 years ago
• Barbarisch / forkatz
  credential dump using foreshaw technique using SeTrustedCredmanAccessPrivilege
  ☆124Updated 3 years ago