Alternatives and similar repositories for SeDebugAbuse

Users that are interested in SeDebugAbuse are comparing it to the libraries listed below

• RayRRT / Active-Directory-Certificate-Services-abuse
  ☆49Updated 2 years ago
• xct / adopt
  Spawns a process from a process. Can sometimes be used to run a session > 0 process from session 0.
  ☆15Updated 2 years ago
• NotMedic / Invoke-Nanodump
  HelpSystems Nanodump, but wrapped in powershell via Invoke-ReflectivePEInjection
  ☆55Updated 3 years ago
• JonasBK / Powershell
  ☆39Updated 3 months ago
• BronzeBee / DavRelayUp
  An old Windows workstations LPE for domain environments without LDAP signing/channel binding.
  ☆32Updated 2 years ago
• laxa / SharpSecretsdump
  Secretsdump C# version only supporting local (live) operation
  ☆49Updated 3 weeks ago
• Wh04m1001 / CVE-2022-3368
  ☆29Updated 2 years ago
• Nariod / laz-y
  Automating payload generation for OSEP labs and exam.
  ☆34Updated 2 years ago
• Wh04m1001 / DiagTrackEoP
  ☆88Updated 2 years ago
• secure-77 / Certipy-Docker
  Certipy in Docker
  ☆11Updated last year
• 0xAbdullah / Offensive-Snippets
  A repository with my code snippets for research/education purposes.
  ☆50Updated last year
• horizon3ai / backup_dc_registry
  A simple POC that abuses Backup Operator privileges to remote dump SAM, SYSTEM, and SECURITY
  ☆83Updated 3 years ago
• mmnoureldin / UnmanagedPowerShell
  ☆29Updated 2 years ago
• bruno-1337 / SeDebugPrivilege-Exploit
  Simple C++ PoC of SeDebugPrivilege Privesc
  ☆23Updated last year
• Yeeb1 / SharpRDPlusSnatcher
  Exploits a flaw in Remote Desktop Plus by monitoring and decrypting temporary .rdp files in %localappdata%/Temp, revealing credentials us…
  ☆16Updated last year
• p0dalirius / MSRPRN-Coerce
  A python script to force authentication using MS-RPRN RemoteFindFirstPrinterChangeNotificationEx function (opnum 65).
  ☆21Updated 3 months ago
• Wh04m1001 / MSIExecEoP
  Arbitrary File Delete in Windows Installer before 10.0.19045.2193
  ☆29Updated 2 years ago
• MinoTauro2020 / RedTeam-CRTL-Certification
  ☆16Updated 4 months ago
• KINGSABRI / MSI-AlwaysInstallElevated
  A Collection of templates that can be used for abusing window's AlwaysInstallElevated policy
  ☆32Updated 2 years ago
• susMdT / SharpAgent
  C# havoc implant
  ☆99Updated 2 years ago
• pwnsauc3 / RWXfinder
  The program uses the Windows API functions to traverse through directories and locate DLL files with RWX section
  ☆101Updated last year
• p0dalirius / FindProcessesWithNamedPipes
  A simple C++ Windows tool to get information about processes exposing named pipes.
  ☆37Updated 2 months ago
• x4sh3s / AMSI_Lines
  Bypass AMSI By Dividing files into multiple smaller files
  ☆45Updated 2 years ago
• jojonas / SharpSAMDump
  SAM Dumping in C#
  ☆48Updated 4 months ago
• SolomonSklash / RubeusToCcache
  A small tool to convert Base64-encoded .kirbi tickets from Rubeus into .ccache files for Impacket
  ☆55Updated 4 years ago
• LuemmelSec / ntlmrelayx.py_to_exe
  ☆86Updated last year
• NVISOsecurity / cs2br-bof
  Run Cobalt Strike BOFs in Brute Ratel C4!
  ☆66Updated last month
• eversinc33 / SharpStartWebclient
  Programmatically start WebClient from an unprivileged session to enable that juicy privesc.
  ☆74Updated 2 years ago
• mallo-m / AxiomDumper
  Lsass dumper evading (some) EDR detection
  ☆23Updated 2 months ago
• fanbyprinciple / bin2shellcode
  .bin file to shellcode convertor
  ☆37Updated 10 months ago