yanghaoi / LaunchSystemCmdLinks
在权限足够的情况下弹出system权限的cmd命令行，包含exe和dll两种文件类型，可用于一些可能存在本地提权漏洞的测试。
☆34Updated 3 years ago
Alternatives and similar repositories for LaunchSystemCmd
Users that are interested in LaunchSystemCmd are comparing it to the libraries listed below
Sorting:
- 密码收集☆58Updated 3 years ago
- Lsass memory dump.☆55Updated last year
- ☆31Updated 2 years ago
- ☆49Updated 2 years ago
- Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user; Adding the sam_the_admin_maq when MachineAccoun…☆22Updated last year
- CrackMapExec extension module/protocol support☆42Updated 2 years ago
- CVE-2020-1472 C++☆83Updated 3 years ago
- 批量检查远程桌面密码或ntlm是否正确☆41Updated 4 years ago
- 一个基于DNS隧道的简单C2☆59Updated 3 years ago
- Search msDS-AllowedToActOnBehalfOfOtherIdentity☆35Updated 3 years ago
- 利用EFSRPC协议批量探测出网☆66Updated 2 years ago
- 使用Csharp实现自动修改注册表键并强制锁屏，使其可被抓取明文密码。☆30Updated 5 years ago
- command execute without 445 port☆52Updated 3 years ago
- 通过websocket在IIS8(Windows Server 2012)以上实现socks5代理☆93Updated last year
- BOF implementation of delete self poc that delete a locked executable or a currently running file from disk by its pid, path, or the curr…☆78Updated 2 years ago
- ☆15Updated 2 years ago
- 利用RPC服务，内网批量探测Windows出网☆14Updated 3 years ago
- 魔改shadowsocks，实现socks5内网穿透。☆63Updated last week
- Zerologon自动化脚本☆96Updated 2 years ago
- 窃取当前用户的ssh，sudo密码☆69Updated 2 years ago
- a 'pentest' udf plugin of MySQL.☆38Updated 3 years ago
- Asset scanning by dictionary stitching Domain to identify Exchange Servers versions☆45Updated 2 years ago
- ☆35Updated 9 months ago
- 利用NTLM Hash读取Exchange邮件☆58Updated 2 years ago
- Cobalt Strike BOF that Add an admin user☆78Updated 3 years ago
- 导出coremail联系人☆18Updated 2 years ago
- Windows Api调用，用来绕过杀软添加用户☆22Updated 4 years ago
- dump lsass☆37Updated 3 years ago
- Domain penetration automation module one, domain information collection.☆19Updated 2 years ago
- ☆35Updated 3 years ago