Popular repositories Loading

1. KrbRelayUp KrbRelayUp Public

   KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

   C# 1.5k 199

2. HWSyscalls HWSyscalls Public

   HWSyscalls is a new method to execute indirect syscalls using HWBP, HalosGate and a synthetic trampoline on kernel32 with HWBP.

   C++ 578 95

3. DavRelayUp DavRelayUp Public

   DavRelayUp - a universal no-fix local privilege escalation in domain-joined windows workstations where LDAP signing is not enforced (the default settings).

   C# 504 78

4. ShadowSpray ShadowSpray Public

   A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other objects in the domain.

   C# 438 80

5. DllNotificationInjection DllNotificationInjection Public

   A POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and remote processes.

   C++ 428 75

6. AMS-BP AMS-BP Public

   AMSI Bypass for powershell

   PowerShell 32 8