xct / SeRestoreAbuse

Related projects: ⓘ

• xct / SeManageVolumeAbuse
  SeManageVolumePrivilege to SYSTEM
  ☆61Updated 9 months ago
• horizon3ai / backup_dc_registry
  A simple POC that abuses Backup Operator privileges to remote dump SAM, SYSTEM, and SECURITY
  ☆74Updated 2 years ago
• CsEnox / SeManageVolumeExploit
  ☆75Updated last year
• buyne / OSEP-1
  ☆26Updated 2 years ago
• fashionproof / EnableAllTokenPrivs
  ☆61Updated 4 years ago
• jazzpizazz / BloodHound.py-Kerberos
  A Python based ingestor for BloodHound
  ☆81Updated last year
• Karmaz95 / evasion
  AV EVASION TECHNIQUES
  ☆68Updated 2 years ago
• rootshooter / osep-code-dump-2022
  Code dump from PEN-300/OSEP updated 2022
  ☆39Updated 2 years ago
• G0ldenGunSec / GetWebDAVStatus
  Determine if the WebClient Service (WebDAV) is running on a remote system
  ☆117Updated 6 months ago
• RayRRT / Active-Directory-Certificate-Services-abuse
  ☆40Updated 2 years ago
• improsec / BackupOperatorToolkit
  The BackupOperatorToolkit contains different techniques allowing you to escalate from Backup Operator to Domain Admin
  ☆164Updated last year
• rootshooter / shellcoder
  Shellcode generation and encoding utility
  ☆21Updated 2 years ago
• fortalice / modifyCertTemplate
  ADCS cert template modification and ACL enumeration
  ☆126Updated last year
• powerseb / PowerExtract
  ☆110Updated last year
• cinzinga / Evasion-Practice
  A variety of AV evasion techniques written in C# for practice.
  ☆77Updated 3 years ago
• sliverarmory / armory
  The Official Sliver Armory
  ☆80Updated last month
• LuemmelSec / ntlmrelayx.py_to_exe
  ☆76Updated last year
• p0dalirius / pyLAPS
  Python setter/getter for property ms-Mcs-AdmPwd used by LAPS.
  ☆74Updated last month
• Wh04m1001 / DiagTrackEoP
  ☆87Updated 2 years ago
• Crypt0s / DelegationBOF
  ☆135Updated 2 years ago
• mlcsec / SharpSQL
  Simple C# implementation of PowerUpSQL
  ☆91Updated 2 months ago
• garrettfoster13 / aced
  ☆144Updated 7 months ago
• SYANiDE- / SuperSharpShooter
  Payload Generation Framework
  ☆84Updated 6 months ago
• slemire / WSPCoerce
  PoC to coerce authentication from Windows hosts using MS-WSP
  ☆218Updated last year
• x4sh3s / AMSI_Lines
  Bypass AMSI By Dividing files into multiple smaller files
  ☆45Updated last year
• Qazeer / OffensivePythonPipeline
  Static standalone binaries for Linux and Windows (x64) of Python offensive tools. Compiled using PyInstaller, Docker for Windows, WSL2, a…
  ☆95Updated 2 years ago
• n00py / DCSync
  DCSync Attack from Outside using Impacket
  ☆109Updated 2 years ago
• laxa / SharpSecretsdump
  Secretsdump C# version only supporting local (live) operation
  ☆47Updated last year
• mlcsec / ASRenum-BOF
  Cobalt Strike BOF that identifies Attack Surface Reduction (ASR) rules, actions, and exclusion locations
  ☆136Updated 6 months ago
• mandiant / ccmpwn
  ☆174Updated 5 months ago