Alternatives and similar repositories for PrintNightmare

Users that are interested in PrintNightmare are comparing it to the libraries listed below

• netero1010 / ServiceMove-BOF
  New lateral movement technique by abusing Windows Perception Simulation Service to achieve DLL hijacking code execution.
  ☆301Updated 3 years ago
• CCob / lsarelayx
  NTLM relaying for Windows made easy
  ☆579Updated 2 years ago
• cube0x0 / MiniDump
  C# Lsass parser
  ☆296Updated 4 years ago
• cube0x0 / BofRoast
  Beacon Object Files for roasting Active Directory
  ☆235Updated 3 years ago
• klezVirus / CandyPotato
  Pure C++, weaponized, fully automated implementation of RottenPotatoNG
  ☆314Updated 4 years ago
• boku7 / spawn
  Cobalt Strike BOF that spawns a sacrificial process, injects it with shellcode, and executes payload. Built to evade EDR/UserLand hooks b…
  ☆469Updated 2 years ago
• GoSecure / WSuspicious
  WSuspicious - A tool to abuse insecure WSUS connections for privilege escalations
  ☆372Updated 5 years ago
• Mr-Un1k0d3r / ADHuntTool
  official repo for the AdHuntTool (part of the old RedTeamCSharpScripts repo)
  ☆232Updated 3 years ago
• iomoath / PowerShx
  Run Powershell without software restrictions.
  ☆282Updated 4 years ago
• ly4k / Pachine
  Python implementation for CVE-2021-42278 (Active Directory Privilege Escalation)
  ☆277Updated 4 years ago
• S3cur3Th1sSh1t / MultiPotato
  ☆539Updated 4 years ago
• S3cur3Th1sSh1t / SharpImpersonation
  A User Impersonation tool - via Token or Shellcode injection
  ☆421Updated 3 years ago
• boku7 / injectAmsiBypass
  Cobalt Strike BOF - Bypass AMSI in a remote process with code injection.
  ☆383Updated 2 years ago
• S3cur3Th1sSh1t / Invoke-SharpLoader
  ☆362Updated 4 years ago
• RiccardoAncarani / LiquidSnake
  LiquidSnake is a tool that allows operators to perform fileless lateral movement using WMI Event Subscriptions and GadgetToJScript
  ☆346Updated 4 years ago
• preemptdev / bluffy
  Convert shellcode into different formats!
  ☆358Updated 3 years ago
• pwn1sher / WMEye
  WMEye is a post exploitation tool that uses WMI Event Filter and MSBuild Execution for lateral movement
  ☆369Updated 4 years ago
• S1ckB0y1337 / TokenPlayer
  Manipulating and Abusing Windows Access Tokens.
  ☆287Updated 5 years ago
• 0xthirteen / SharpMove
  .NET Project for performing Authenticated Remote Execution
  ☆406Updated 3 years ago
• pwn1sher / frostbyte
  FrostByte is a POC project that combines different defense evasion techniques to build better redteam payloads
  ☆386Updated 3 years ago
• aslitsecurity / CVE-2021-40444_builders
  This repo contain builders of cab file, html file, and docx file for CVE-2021-40444 exploit
  ☆170Updated 4 years ago
• boku7 / Ninja_UUID_Runner
  Module Stomping, No New Thread, HellsGate syscaller, UUID Shellcode Runner for x64 Windows 10!
  ☆454Updated 2 years ago
• ScorpionesLabs / DVS
  D(COM) V(ulnerability) S(canner) AKA Devious swiss army knife - Lateral movement using DCOM Objects
  ☆254Updated 5 years ago
• xforcered / InvisibilityCloak
  Proof-of-concept obfuscation toolkit for C# post-exploitation tools
  ☆430Updated 3 years ago
• ly4k / PrintNightmare
  Python implementation for PrintNightmare (CVE-2021-1675 / CVE-2021-34527)
  ☆206Updated 4 years ago
• 0xthirteen / StayKit
  Cobalt Strike kit for Persistence
  ☆494Updated 6 years ago
• bats3c / ADCSPwn
  A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certifica…
  ☆863Updated 2 years ago
• 0xthirteen / SharpStay
  .NET project for installing Persistence
  ☆496Updated last year
• optiv / Dent
  A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors.
  ☆297Updated 2 years ago
• dosxuz / DefenderStop
  Stop Defender Service using C# via Token Impersonation
  ☆170Updated 4 years ago