Alternatives and similar repositories for PrintNightmare:

Users that are interested in PrintNightmare are comparing it to the libraries listed below

• mrd0x / pe2shc-to-cdb
  Convert shellcode generated using pe_2_shellcode to cdb format.
  ☆96Updated 3 years ago
• S3cur3Th1sSh1t / NamedPipePTH
  Pass the Hash to a named pipe for token Impersonation
  ☆140Updated 3 years ago
• sailay1996 / cve-2022-21882-poc
  lpe poc for cve-2022-21882
  ☆49Updated 2 years ago
• 0xB455 / AmsiBypass
  C# PoC implementation for bypassing AMSI via in memory patching
  ☆65Updated 4 years ago
• magnusstubman / MagnusKatz
  Research project for understanding how Mimikatz work and become better at C
  ☆117Updated 3 years ago
• ariary / DogWalk-rce-poc
  🐾Dogwalk PoC (using diagcab file to obtain RCE on windows)
  ☆80Updated 2 years ago
• xpn / ntlmquic
  POC tools for exploring SMB over QUIC protocol
  ☆122Updated 2 years ago
• notdodo / adduser-dll
  Simple DLL that add a user to the local Administrators group
  ☆77Updated 3 years ago
• jfmaes / SharpNukeEventLog
  nuke that event log using some epic dinvoke fu
  ☆116Updated 3 years ago
• bats3c / DefensiveInjector
  Shellcode injector using direct syscalls
  ☆119Updated 4 years ago
• 0vercl0k / CVE-2022-21974
  PoC for CVE-2022-21974 "Roaming Security Rights Management Services Remote Code Execution Vulnerability"
  ☆59Updated 2 years ago
• SolomonSklash / SyscallPOC
  Shellcode injection POC using syscalls.
  ☆117Updated 4 years ago
• tothi / SharpStay
  .NET project for installing Persistence
  ☆64Updated 2 years ago
• plackyhacker / Peruns-Fart
  Perun's Fart (Slavic God's Luck). Another method for unhooking AV and EDR, this is my C# version.
  ☆105Updated 3 years ago
• modzero / MZ-21-02-Trendmicro
  Critical Vulnerabilities in Trend Micro Deep Security Agent for Linux
  ☆28Updated 3 years ago
• vestjoe / cobaltstrike_services
  AutoStart teamserver and listeners with services
  ☆71Updated 3 years ago
• bashexplode / cs2webconfig
  Convert Cobalt Strike profiles to IIS web.config files
  ☆112Updated 3 years ago
• snovvcrash / MirrorDump
  Another LSASS dumping tool that uses a dynamically compiled LSA plugin to grab an lsass handle and API hooking for capturing the dump in…
  ☆102Updated 2 years ago
• t3hbb / NSGenCS
  Extendable payload obfuscation and delivery framework
  ☆141Updated 2 years ago
• xRET2pwn / PickleC2
  PickleC2 is a post-exploitation and lateral movements framework
  ☆87Updated 3 years ago
• JohnWoodman / stealthInjector
  Injects shellcode into remote processes using direct syscalls
  ☆74Updated 4 years ago
• GoSecure / ldap-scanner
  Checks for signature requirements over LDAP
  ☆95Updated 2 years ago
• mhaskar / Shellcode-In-Memory-Decoder
  A simple C implementation to decoded your shellcode and writes it directly to memory
  ☆93Updated 4 years ago
• sailay1996 / delete2SYSTEM
  Weaponizing for Arbitrary Files/Directories Delete bugs to Get NT AUTHORITY\SYSTEM
  ☆122Updated 4 years ago
• cube0x0 / CVE-2020-1472
  ☆37Updated 4 years ago
• m57 / cobaltstrike_bofs
  My CobaltStrike BOFS
  ☆160Updated 2 years ago
• sailay1996 / SpoolTrigger
  Weaponizing for privileged file writes bugs with PrintNotify Service
  ☆134Updated 2 years ago
• mobdk / CopyCat
  Simple rapper for Mimikatz, bypass Defender
  ☆140Updated 3 years ago
• byt3bl33d3r / BOF-Nim
  Cobalt Strike BOF Files with Nim!
  ☆84Updated 2 years ago
• hyp3rlinx / DarkFinger-C2
  Windows TCPIP Finger Command / C2 Channel and Bypassing Security Software
  ☆66Updated last year