last - @last0x00

PersistenceSniper. Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte

RIPPL. RIPPL is a tool that abuses a usermode only exploit to manipulate PPL processes on Windows

RAII-types. Code to handle certain Windows types using the RAII paradigm

HppDLL. Source code for HppDLL - local password dumping using MsvpPasswordValidate hooks

Get-LAPSPasswords. Powershell function to pull the local admin passwords from LDAP, stored there by LAPS.

lazy_importer. library for importing functions from dlls in a hidden, reverse engineer unfriendly way

exploits. A collection of exploit I wrote or I modified

autoPhisher. Script to setup a phishing server on the cloud

SigThief. Stealing Signatures and Making One Invalid Signature at a Time

LudusRanges.

BloodHound. Six Degrees of Domain Admin