Alternatives and similar repositories for PrintNightmare-CVE-2021-34527:

Users that are interested in PrintNightmare-CVE-2021-34527 are comparing it to the libraries listed below

• ly4k / PrintNightmare
  Python implementation for PrintNightmare (CVE-2021-1675 / CVE-2021-34527)
  ☆185Updated 3 years ago
• m8sec / CVE-2021-34527
  PrintNightmare (CVE-2021-34527) PoC Exploit
  ☆109Updated 2 years ago
• bugch3ck / SharpEfsPotato
  Local privilege escalation from SeImpersonatePrivilege using EfsRpc.
  ☆317Updated 2 years ago
• ShutdownRepo / ShadowCoerce
  MS-FSRVP coercion abuse PoC
  ☆288Updated 3 years ago
• xct / SeRestoreAbuse
  SeRestorePrivilege to SYSTEM
  ☆106Updated 3 years ago
• Tw1sm / RITM
  Roast in the Middle
  ☆292Updated 5 months ago
• micahvandeusen / gMSADumper
  Lists who can read any gMSA password blobs and parses them if the current user has access.
  ☆274Updated last year
• slemire / WSPCoerce
  PoC to coerce authentication from Windows hosts using MS-WSP
  ☆235Updated last year
• VirtualAlllocEx / Payload-Download-Cradles
  This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR …
  ☆257Updated 2 years ago
• cube0x0 / SharpSystemTriggers
  Collection of remote authentication triggers in C#
  ☆483Updated 11 months ago
• dirkjanm / forest-trust-tools
  Proof-of-concept tools for my AD Forest trust research
  ☆208Updated 10 months ago
• JoelGMSec / PSAsyncShell
  PowerShell Asynchronous TCP Reverse Shell
  ☆155Updated last year
• mdsecactivebreach / Farmer
  ☆379Updated 3 years ago
• rvazarkar / GMSAPasswordReader
  ☆219Updated 2 years ago
• Hackndo / sprayhound
  Password spraying tool and Bloodhound integration
  ☆231Updated 3 months ago
• GoSecure / WSuspicious
  WSuspicious - A tool to abuse insecure WSUS connections for privilege escalations
  ☆356Updated 4 years ago
• Flangvik / ObfuscatedSharpCollection
  Attempt at Obfuscated version of SharpCollection
  ☆206Updated last week
• zer1t0 / certi
  ADCS abuser
  ☆278Updated 2 years ago
• p0dalirius / MSSQL-Analysis-Coerce
  A technique to coerce a Windows SQL Server to authenticate on an arbitrary machine.
  ☆129Updated last year
• CsEnox / SeManageVolumeExploit
  ☆110Updated last year
• MythicAgents / Medusa
  Medusa is a cross-platform C2 agent compatible with Python 2.7 and 3.8, compatible with Mythic
  ☆177Updated 3 weeks ago
• S3cur3Th1sSh1t / SharpNamedPipePTH
  Pass the Hash to a named pipe for token Impersonation
  ☆302Updated last year
• Z4kSec / Masky
  Python library with CLI allowing to remotely dump domain user credentials via an ADCS without dumping the LSASS process memory
  ☆388Updated last year
• ThePorgs / impacket
  Impacket is a collection of Python classes for working with network protocols.
  ☆280Updated 3 months ago
• S3cur3Th1sSh1t / SharpImpersonation
  A User Impersonation tool - via Token or Shellcode injection
  ☆413Updated 2 years ago
• Trackflaw / CVE-2023-23397
  Simple PoC of the CVE-2023-23397 vulnerability with the payload sent by email.
  ☆123Updated 2 years ago
• Gl3bGl4z / All_NTLM_leak
  ☆81Updated 4 years ago
• calebstewart / bypass-clm
  PowerShell Constrained Language Mode Bypass
  ☆261Updated 4 years ago
• ly4k / PassTheChallenge
  Recovering NTLM hashes from Credential Guard
  ☆334Updated 2 years ago
• fortalice / bofhound
  Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel
  ☆328Updated last year