micahvandeusen / GenericPotato
Impersonating authentication over HTTP and/or named pipes.
☆128Updated 3 years ago
Alternatives and similar repositories for GenericPotato:
Users that are interested in GenericPotato are comparing it to the libraries listed below
- Loads a custom dll in system32 via diaghub.☆71Updated 5 years ago
- Python implementation for PetitPotam☆197Updated 3 years ago
- Weaponizing for privileged file writes bugs with windows problem reporting☆218Updated 2 years ago
- MS-FSRVP coercion abuse PoC☆287Updated 3 years ago
- official repo for the AdHuntTool (part of the old RedTeamCSharpScripts repo)☆230Updated 2 years ago
- A simple POC that abuses Backup Operator privileges to remote dump SAM, SYSTEM, and SECURITY☆80Updated 3 years ago
- A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts t…☆61Updated 6 years ago
- C# version of Powermad☆160Updated last year
- Run Rubeus via Rundll32☆198Updated 4 years ago
- Local privilege escalation from SeImpersonatePrivilege using EfsRpc.☆310Updated 2 years ago
- AV EVASION TECHNIQUES☆77Updated 2 years ago
- Agressor script that lists available Cobalt Strike beacon commands and colors them based on their type☆201Updated last year
- A Python based ingestor for BloodHound☆83Updated 2 years ago
- SeRestorePrivilege to SYSTEM☆95Updated 3 years ago
- Pass the Hash to a named pipe for token Impersonation☆301Updated last year
- Simple C# implementation of PowerUpSQL☆94Updated 8 months ago
- C# version of MDSec's ParallelSyscalls☆140Updated 3 years ago
- Extendable payload obfuscation and delivery framework☆141Updated 2 years ago
- DLL Hijack Search Order Enumeration BOF☆147Updated 3 years ago
- Scripts created to help with post exploitation of a Windows host☆96Updated 4 years ago
- Dumping SAM / SECURITY / SYSTEM registry hives with a Beacon Object File☆193Updated 4 years ago
- A little tool to convert ccache tickets into kirbi (KRB-CRED) and vice versa based on impacket.☆166Updated 2 years ago
- Dump stuff without touching disk☆162Updated 4 years ago
- New UAC bypass for Silent Cleanup for CobaltStrike☆191Updated 3 years ago
- A technique to coerce a Windows SQL Server to authenticate on an arbitrary machine.☆127Updated last year
- A BOF to automate common persistence tasks for red teamers☆273Updated 2 years ago
- Proof-of-concept tools for my AD Forest trust research☆204Updated 9 months ago
- A collection of code snippets built to assist with breaking chains.☆118Updated 10 months ago
- ADCS abuser☆275Updated 2 years ago
- Static standalone binaries for Linux and Windows (x64) of Python offensive tools. Compiled using PyInstaller, Docker for Windows, WSL2, a…☆100Updated 2 years ago