Popular repositories Loading

1. KrbRelayUp KrbRelayUp Public

   KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

   C# 1.5k 203

2. HWSyscalls HWSyscalls Public

   HWSyscalls is a new method to execute indirect syscalls using HWBP, HalosGate and a synthetic trampoline on kernel32 with HWBP.

   C++ 627 98

3. DavRelayUp DavRelayUp Public

   DavRelayUp - a universal no-fix local privilege escalation in domain-joined windows workstations where LDAP signing is not enforced (the default settings).

   C# 523 78

4. ShadowSpray ShadowSpray Public

   A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other objects in the domain.

   C# 452 79

5. DllNotificationInjection DllNotificationInjection Public

   A POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and remote processes.

   C++ 433 75

6. AMS-BP AMS-BP Public

   AMSI Bypass for powershell

   PowerShell 30 8