This is your work, valued

Israel

Omri Baso

Expert
@OmriBaso

Hey, My name is Omri Baso I'm 25 years old and I'm a Red Teamer and a Security Researcher from Israel.

www.linkedin.com/in/omri-baso-875aaa191/

RToolZ. A Stealthy Lsass Dumper - can abuse ProcExp152.sys driver to dump PPL Lsass, no dbghelp.lib calls.

326

WTSImpersonator. WTSImpersonator utilizes WTSQueryUserToken to steal user tokens by abusing the RPC Named Pipe "\\pipe\LSM_API_service"

122

BesoToken. A tool to Impersonate logged on users without touching LSASS (Including non-Interactive sessions).

90

DLLicous-MaliciousDLL. A generator for malicious DLL files for DLL Hijacking attacks

33

windows-privilege-escalation-cheat-sheet. Updating on a daily base.

14

besocurl. A library for HTTP / HTTPs request support SSPI and PAC file parsing(Automatic proxy settings detection)

7

JWT-Master. JWT Token Decoder - Forger - And Secret Key Brute Forcer

6

mobile-pt-scripts. A repo by your beloved pentester for mobile pentesting scripts both for Android and iOS

4

PROCEXP.sys_weaponized. C++

4

Invoke-Unconstrained. Python

2

Socks5Server. Windows C/C++ Socks5 Server

2

CVE-2022-22845-Exploit. Exploit for CVE-2022-22845 - Unauthenticated Admin Takeover On QXIP SIPCAPTURE Homer-App up to 1.4.27

2

PToolity. Python based script used for PT / Replacing the exisiting known tools

2

XSS-Payloads. List of advanced XSS payloads

1

msdn-code-gallery-microsoft. Samples from Microsoft teams for the MSDN Code Gallery

1