Alternatives and similar repositories for CVE-2021-40444:

Users that are interested in CVE-2021-40444 are comparing it to the libraries listed below

• klezVirus / CVE-2021-40444
  CVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit
  ☆805Updated last year
• cube0x0 / CVE-2021-1675
  C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527
  ☆1,872Updated 3 years ago
• cube0x0 / noPac
  CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.
  ☆1,361Updated 3 years ago
• chvancooten / follina.py
  POC to replicate the full 'Follina' Office RCE vulnerability for testing purposes
  ☆1,137Updated 2 years ago
• topotam / PetitPotam
  PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.
  ☆1,932Updated 7 months ago
• optiv / ScareCrow
  ScareCrow - Payload creation framework designed around EDR bypass.
  ☆2,795Updated last year
• 0vercl0k / CVE-2021-31166
  Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely.
  ☆822Updated 3 years ago
• CCob / SweetPotato
  Local Service to SYSTEM privilege escalation from Windows 7 to Windows 10 / Server 2019
  ☆1,684Updated 6 months ago
• fortra / nanodump
  The swiss army knife of LSASS dumping
  ☆1,893Updated 6 months ago
• safebuffer / sam-the-admin
  Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user
  ☆1,010Updated 2 years ago
• rootclay / WMIHACKER
  A Bypass Anti-virus Software Lateral Movement Command Execution Tool
  ☆1,422Updated 2 months ago
• chompie1337 / SMBGhost_RCE_PoC
  ☆1,338Updated 4 years ago
• klezVirus / inceptor
  Template-Driven AV/EDR Evasion Framework
  ☆1,651Updated last year
• login-securite / lsassy
  Extract credentials from lsass remotely
  ☆2,101Updated 3 months ago
• Arinerron / CVE-2022-0847-DirtyPipe-Exploit
  A root exploit for CVE-2022-0847 (Dirty Pipe)
  ☆1,094Updated 3 years ago
• S3cur3Th1sSh1t / WinPwn
  Automation for internal Windows Penetrationtest / AD-Security
  ☆3,452Updated 4 months ago
• roadwy / RIP
  ☆1,464Updated last year
• itm4n / PrintSpoofer
  Abusing impersonation privileges through the "Printer Bug"
  ☆1,954Updated 4 years ago
• Dec0ne / KrbRelayUp
  KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default…
  ☆1,573Updated 2 years ago
• ohpe / juicy-potato
  A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts t…
  ☆2,532Updated 3 years ago
• 0xsp-SRD / mortar
  evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)
  ☆1,447Updated last year
• dirkjanm / CVE-2020-1472
  PoC for Zerologon - all research credits go to Tom Tervoort of Secura
  ☆1,218Updated 4 years ago
• gloxec / CrossC2
  generate CobaltStrike's cross-platform payload
  ☆2,370Updated last year
• Flangvik / SharpCollection
  Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure …
  ☆2,421Updated last month
• ly4k / SpoolFool
  Exploit for CVE-2022-21999 - Windows Print Spooler Elevation of Privilege Vulnerability (LPE)
  ☆786Updated 3 years ago
• b4rtik / SharpKatz
  Porting of mimikatz sekurlsa::logonpasswords, sekurlsa::ekeys and lsadump::dcsync commands
  ☆994Updated 3 years ago
• itm4n / PrivescCheck
  Privilege Escalation Enumeration Script for Windows
  ☆3,170Updated 3 weeks ago
• BC-SECURITY / Starkiller
  Starkiller is a Frontend for PowerShell Empire.
  ☆1,435Updated last week
• veracode-research / rogue-jndi
  A malicious LDAP server for JNDI injection attacks
  ☆1,026Updated last year
• tenable / poc
  Proof of Concepts
  ☆1,248Updated 4 months ago