tylerdotrar / SigmaPotato
SeImpersonate privilege escalation tool for Windows 8 - 11 and Windows Server 2012 - 2022 with extensive PowerShell and .NET reflection support.
☆334Updated 11 months ago
Alternatives and similar repositories for SigmaPotato
Users that are interested in SigmaPotato are comparing it to the libraries listed below
Sorting:
- Collection of useful pre-compiled .NET binaries or other executables for penetration testing Windows Active Directory environments☆144Updated 2 months ago
- Local privilege escalation from SeImpersonatePrivilege using EfsRpc.☆319Updated 2 years ago
- Attempt at Obfuscated version of SharpCollection☆206Updated 3 weeks ago
- Leak of any user's NetNTLM hash. Fixed in KB5040434☆255Updated 9 months ago
- Extract and execute a PE embedded within a PNG file using an LNK file.☆408Updated 6 months ago
- MultiDump is a post-exploitation tool for dumping and extracting LSASS memory discreetly.☆518Updated 2 weeks ago
- 🍊 Orange Tsai EventViewer RCE☆184Updated 3 years ago
- Windows remote execution multitool☆438Updated last week
- Dump lsass using only NTAPI functions creating 3 JSON and 1 ZIP file... and generate the MiniDump file later!☆461Updated this week
- Amsi Bypass payload that works on Windwos 11☆377Updated last year
- Collection of Beacon Object Files (BOF) for Cobalt Strike☆583Updated 9 months ago
- DeadPotato is a windows privilege escalation utility from the Potato family of exploits, leveraging the SeImpersonate right to obtain SYS…☆384Updated 8 months ago
- BOF for Kerberos abuse (an implementation of some important features of the Rubeus).☆459Updated last month
- Escalate Service Account To LocalSystem via Kerberos☆395Updated last year
- Cobalt Strike BOF for evasive .NET assembly execution☆242Updated last month
- Active Directory reconnaissance and exploitation for Red Teams via the Active Directory Web Services (ADWS).☆542Updated last year
- Fileless atexec, no more need for port 445☆366Updated last year
- Dump lsass using only NTAPI functions by hand-crafting Minidump files (without MiniDumpWriteDump!!!)☆612Updated this week
- Multiplayer pivoting solution☆373Updated 3 weeks ago
- Awesome AV/EDR/XDR Bypass Tips☆271Updated 2 years ago
- Materials for the workshop "Red Team Ops: Havoc 101"☆375Updated 7 months ago
- micr0shell is a Python script that dynamically generates Windows X64 PIC Null-Free reverse shell shellcode.☆187Updated 9 months ago
- Remote Kerberos Relay made easy! Advanced Kerberos Relay Framework☆589Updated this week
- UAC Bypass By Abusing Kerberos Tickets☆495Updated last year
- The GPOddity project, aiming at automating GPO attack vectors through NTLM relaying (and more).☆301Updated 6 months ago
- ☆332Updated 3 months ago
- Collection of UAC Bypass Techniques Weaponized as BOFs☆503Updated last year
- Various resources to enhance Cobalt Strike's functionality and its ability to evade antivirus/EDR detection☆290Updated 11 months ago
- A list of python tools to help create an OPSEC-safe Cobalt Strike profile.☆421Updated last year
- Bypassing UAC with SSPI Datagram Contexts☆436Updated last year