Popular repositories Loading

1. KrbRelayUp KrbRelayUp Public

   KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

   C# 1.6k 210

2. HWSyscalls HWSyscalls Public

   HWSyscalls is a new method to execute indirect syscalls using HWBP, HalosGate and a synthetic trampoline on kernel32 with HWBP.

   C++ 718 108

3. DavRelayUp DavRelayUp Public

   DavRelayUp - a universal no-fix local privilege escalation in domain-joined windows workstations where LDAP signing is not enforced (the default settings).

   C# 568 80

4. ShadowSpray ShadowSpray Public

   A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other objects in the domain.

   C# 483 80

5. DllNotificationInjection DllNotificationInjection Public

   A POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and remote processes.

   C++ 465 83

6. AMS-BP AMS-BP Public

   AMSI Bypass for powershell

   PowerShell 30 8