hatRiot / token-priv
Token Privilege Research
☆781Updated 7 years ago
Related projects ⓘ
Alternatives and complementary repositories for token-priv
- SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader☆1,224Updated 5 years ago
- New version of RottenPotato as a C++ DLL and standalone C++ binary - no need for meterpreter or other tools.☆904Updated 6 years ago
- A tool to create a JScript file which loads a .NET v2 assembly from memory.☆1,240Updated 3 years ago
- Fileless lateral movement tool that relies on ChangeServiceConfigA to run command☆1,400Updated last year
- ☆473Updated 7 years ago
- A tool to elevate privilege with Windows Tokens☆1,022Updated last year
- PowerShell Pass The Hash Utils☆1,480Updated 5 years ago
- Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS☆1,401Updated 6 years ago
- The project is called Great SCT (Great Scott). Great SCT is an open source project to generate application white list bypasses. This tool…☆1,122Updated 3 years ago
- CACTUSTORCH: Payload Generation for Adversary Simulations☆995Updated 6 years ago
- LSASS memory dumper using direct system calls and API unhooking.☆1,490Updated 3 years ago
- Hide your Powershell script in plain sight. Bypass all Powershell security features☆1,105Updated 5 years ago
- Exchange privilege escalations to Active Directory☆728Updated last year
- PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN RPC interface. This is possible via other protocols as w…☆924Updated 5 months ago
- PowerShell Remote Download Cradle Generator & Obfuscator☆822Updated 6 years ago
- Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources☆1,481Updated last year
- ☆462Updated last year
- Process Injection☆752Updated 3 years ago
- getsystem via parent process using ps1 & embeded c#☆383Updated last year
- Executes PowerShell from an unmanaged process☆476Updated 8 years ago
- Exchange your privileges for Domain Admin privs by abusing Exchange☆980Updated 4 years ago
- Cmd.exe Command Obfuscation Generator & Detection Test Harness☆827Updated 6 years ago
- Also known by Microsoft as Knifecoat☆1,114Updated last year
- PowerShell module to check if a Windows binary (EXE/DLL) has been compiled with ASLR, DEP, SafeSEH, StrongNaming, and Authenticode.☆626Updated 3 months ago
- SharpDump is a C# port of PowerSploit's Out-Minidump.ps1 functionality.☆660Updated 5 years ago
- C# implementation of harmj0y's PowerView☆1,007Updated 7 months ago
- Aggressor scripts for use with Cobalt Strike 3.0+☆794Updated 2 years ago
- Windows - Weaponizing privileged file writes with the Update Session Orchestrator service☆378Updated 4 years ago
- RottenPotato local privilege escalation from service account to SYSTEM☆643Updated 6 years ago
- Another Windows Local Privilege Escalation from Service Account to System☆1,042Updated 3 years ago