Proof-of-Concept for CVE-2024-26218

Proof-of-Concept for CVE-2024-21345

Exploit targeting NT kernel in 24H2 Windows Insider Preview

Admin to Kernel code execution using the KSecDD driver

Repo with different exploits & PoCs

Pokemon Coral Version - Ported to PolishedCrystal

A PowerShell script to download Windows ISOs or the UEFI Shell

Display information about files in different file formats and find gadgets to build rop chains for different architectures (x86/x86_64, ARM/ARM64, MIPS, PowerPC, SPARC64). For disassembly ropper us…

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

Windows MSI Installer LPE (CVE-2021-43883)

D/Invoke standalone shellcode runners

Collection of shellcode injection techniques packed in a D/Invoke weaponized DLL

GC2 is a Command and Control application that allows an attacker to execute commands on the target machine using Google Sheet and exfiltrate data using Google Drive.

Six Degrees of Domain Admin

CVE-2021-40444 PoC

Windows driver with usermode interface which can hide processes, file-system and registry objects, protect processes and etc

OpSec-safe Powershell runspace from within C# (aka SharpPick) with AMSI, Constrained Language Mode and Script Block Logging disabled at startup

Tradecraft Development Fundamentals

C# tool for installing a shared network printer abusing the PrinterNightmare bug to allow other network machines easy privesc!

Template-Driven AV/EDR Evasion Framework

⛅ The right way to check the weather

Enumerate Domain Data

BadAssMacros - C# based automated Malicous Macro Generator.

C# PoC for CVE-2021-36934/HiveNightmare/SeriousSAM

A little toolbox to play with Microsoft Kerberos in C