Alternatives and similar repositories for PrintNightmare:

Users that are interested in PrintNightmare are comparing it to the libraries listed below

• plackyhacker / Peruns-Fart
  Perun's Fart (Slavic God's Luck). Another method for unhooking AV and EDR, this is my C# version.
  ☆106Updated 3 years ago
• mrd0x / pe2shc-to-cdb
  Convert shellcode generated using pe_2_shellcode to cdb format.
  ☆96Updated 3 years ago
• notdodo / adduser-dll
  Simple DLL that add a user to the local Administrators group
  ☆77Updated 3 years ago
• xpn / ntlmquic
  POC tools for exploring SMB over QUIC protocol
  ☆121Updated 2 years ago
• snovvcrash / MirrorDump
  Another LSASS dumping tool that uses a dynamically compiled LSA plugin to grab an lsass handle and API hooking for capturing the dump in…
  ☆102Updated 2 years ago
• S3cur3Th1sSh1t / NamedPipePTH
  Pass the Hash to a named pipe for token Impersonation
  ☆141Updated 3 years ago
• sailay1996 / cve-2022-21882-poc
  lpe poc for cve-2022-21882
  ☆49Updated 3 years ago
• ariary / DogWalk-rce-poc
  🐾Dogwalk PoC (using diagcab file to obtain RCE on windows)
  ☆80Updated 2 years ago
• EspressoCake / DLL-Hijack-Search-Order-BOF
  DLL Hijack Search Order Enumeration BOF
  ☆147Updated 3 years ago
• sailay1996 / windows-stuff
  my learning case about windows
  ☆21Updated 3 years ago
• rsmudge / ZeroLogon-BOF
  ☆157Updated 2 years ago
• 0xB455 / AmsiBypass
  C# PoC implementation for bypassing AMSI via in memory patching
  ☆65Updated 4 years ago
• sailay1996 / SpoolTrigger
  Weaponizing for privileged file writes bugs with PrintNotify Service
  ☆134Updated 2 years ago
• 0vercl0k / CVE-2022-21974
  PoC for CVE-2022-21974 "Roaming Security Rights Management Services Remote Code Execution Vulnerability"
  ☆59Updated 3 years ago
• jbaines-r7 / shakeitoff
  Windows MSI Installer LPE (CVE-2021-43883)
  ☆76Updated 3 years ago
• magnusstubman / MagnusKatz
  Research project for understanding how Mimikatz work and become better at C
  ☆119Updated 3 years ago
• byt3bl33d3r / BOF-Nim
  Cobalt Strike BOF Files with Nim!
  ☆84Updated 2 years ago
• JohnWoodman / stealthInjector
  Injects shellcode into remote processes using direct syscalls
  ☆77Updated 4 years ago
• shubham0d / UAC-bypass-using-dll-injection
  A small project to bypass UAC in windows 10/8/7 using dll injection technique
  ☆73Updated 4 years ago
• RiccardoAncarani / TaskShell
  ☆56Updated 4 years ago
• embee-research / Randomise-api-hashes-cobalt-strike
  Bypass Detection By Randomising ROR13 API Hashes
  ☆135Updated 3 years ago
• sailay1996 / PrintNightmare-LPE
  CVE-2021-1675 (PrintNightmare)
  ☆75Updated 3 years ago
• Wh04m1001 / DiagTrackEoP
  ☆88Updated 2 years ago
• xforcered / Detect-Hooks
  Proof of concept Beacon Object File (BOF) that attempts to detect userland hooks in place by AV/EDR
  ☆99Updated 3 years ago
• calebsargent / GoProcDump
  Golng version of SharpDump that can be used to extract LSASS or any other proces. Provides token elevation prior to creating dump of high…
  ☆21Updated 4 years ago
• bashexplode / cs2webconfig
  Convert Cobalt Strike profiles to IIS web.config files
  ☆112Updated 3 years ago
• tothi / SharpStay
  .NET project for installing Persistence
  ☆64Updated 3 years ago
• rsmudge / CVE-2020-0796-BOF
  ☆70Updated 4 years ago
• Cerbersec / DomainBorrowingC2
  ☆167Updated 3 years ago
• rxwx / cs-rdll-ipc-example
  Example code for using named pipe output with beacon ReflectiveDLLs
  ☆114Updated 4 years ago