Alternatives and similar repositories for PrintNightmare

Users that are interested in PrintNightmare are comparing it to the libraries listed below

• notdodo / adduser-dll
  Simple DLL that add a user to the local Administrators group
  ☆78Updated 3 years ago
• mrd0x / pe2shc-to-cdb
  Convert shellcode generated using pe_2_shellcode to cdb format.
  ☆97Updated 3 years ago
• magnusstubman / MagnusKatz
  Research project for understanding how Mimikatz work and become better at C
  ☆124Updated 3 years ago
• sailay1996 / cve-2022-21882-poc
  lpe poc for cve-2022-21882
  ☆49Updated 3 years ago
• S3cur3Th1sSh1t / NamedPipePTH
  Pass the Hash to a named pipe for token Impersonation
  ☆144Updated 4 years ago
• klezVirus / SharpSelfDelete
  C# implementation of the research by @jonaslyk and the drafted PoC from @LloydLabs
  ☆150Updated 3 years ago
• shubham0d / UAC-bypass-using-dll-injection
  A small project to bypass UAC in windows 10/8/7 using dll injection technique
  ☆74Updated 4 years ago
• sailay1996 / SpoolTrigger
  Weaponizing for privileged file writes bugs with PrintNotify Service
  ☆134Updated 3 years ago
• byt3bl33d3r / BOF-Nim
  Cobalt Strike BOF Files with Nim!
  ☆85Updated 3 years ago
• Cobalt-Strike / sleep_python_bridge
  This project is 'bridge' between the sleep and python language. It allows the control of a Cobalt Strike teamserver through python withou…
  ☆185Updated 2 years ago
• jbaines-r7 / shakeitoff
  Windows MSI Installer LPE (CVE-2021-43883)
  ☆77Updated 3 years ago
• sailay1996 / windows-stuff
  my learning case about windows
  ☆21Updated 3 years ago
• plackyhacker / Peruns-Fart
  Perun's Fart (Slavic God's Luck). Another method for unhooking AV and EDR, this is my C# version.
  ☆110Updated 3 years ago
• 0vercl0k / CVE-2022-21974
  PoC for CVE-2022-21974 "Roaming Security Rights Management Services Remote Code Execution Vulnerability"
  ☆60Updated 3 years ago
• jfmaes / SharpNukeEventLog
  nuke that event log using some epic dinvoke fu
  ☆118Updated 4 years ago
• xforcered / Detect-Hooks
  Proof of concept Beacon Object File (BOF) that attempts to detect userland hooks in place by AV/EDR
  ☆101Updated 4 years ago
• 0xB455 / AmsiBypass
  C# PoC implementation for bypassing AMSI via in memory patching
  ☆65Updated 5 years ago
• ariary / DogWalk-rce-poc
  🐾Dogwalk PoC (using diagcab file to obtain RCE on windows)
  ☆80Updated 2 years ago
• xpn / ntlmquic
  POC tools for exploring SMB over QUIC protocol
  ☆125Updated 3 years ago
• RedSiege / Screenshooter
  C# program to take a full size screenshot or a recording of the user's desktop. Takes in 0-3 flags
  ☆85Updated 4 years ago
• OlivierLaflamme / DNSWho
  transmit cs beacon (shellcode) over self-made dns to avoid anti-kill and AV
  ☆50Updated 4 years ago
• rsmudge / ZeroLogon-BOF
  ☆158Updated 3 years ago
• JohnWoodman / stealthInjector
  Injects shellcode into remote processes using direct syscalls
  ☆79Updated 4 years ago
• bats3c / DefensiveInjector
  Shellcode injector using direct syscalls
  ☆120Updated 4 years ago
• RiccardoAncarani / TaskShell
  ☆57Updated 4 years ago
• SolomonSklash / SyscallPOC
  Shellcode injection POC using syscalls.
  ☆116Updated 5 years ago
• EspressoCake / DLL-Hijack-Search-Order-BOF
  DLL Hijack Search Order Enumeration BOF
  ☆149Updated 3 years ago
• vestjoe / cobaltstrike_services
  AutoStart teamserver and listeners with services
  ☆74Updated 3 years ago
• exploitblizzard / WindowsMDM-LPE-0Day
  CVE-2021-24084 Windows Local Privilege Escalation Left officially unpatched since 2020. Hence, its still a zero day
  ☆50Updated 3 years ago
• snovvcrash / MirrorDump
  Another LSASS dumping tool that uses a dynamically compiled LSA plugin to grab an lsass handle and API hooking for capturing the dump in…
  ☆104Updated 3 years ago