Cn33liz

p0wnedShell. PowerShell Runspace Post Exploitation Toolkit

StarFighters. A JavaScript and VBScript Based Empire Launcher, which runs within their own embedded PowerShell Host.

MSBuildShell. MSBuildShell, a Powershell Host running within MSBuild.exe

CScriptShell. CScriptShell, a Powershell Host running within cscript.exe

JSMeter. JavaScript Reversed TCP Meterpreter Stager

TpmInitUACBypass. Bypassing User Account Control (UAC) using TpmInit.exe

VBSMeter. VBS Reversed TCP Meterpreter Stager

SmashedPotato. C#

p0wnedLoader. C#

HSEVD-StackOverflowX64. HackSys Extreme Vulnerable Driver - Windows 10 x64 StackOverflow Exploit with SMEP Bypass

p0shKiller. C++

MacroMeter. VBA Reversed TCP Meterpreter Stager

MS17-012. MS17-012 - COM Session Moniker EoP Exploit running within MSBuild.exe

SharpCat. SharpCat - A Simple Reversed Command Shell which can be started using InstallUtil (Bypassing AppLocker)

TpmInitUACAnniversaryBypass. Bypassing User Account Control (UAC) using TpmInit.exe

EasySystem. Quick and dirty System (Power)Shell using NamedPipe impersonation.

HSEVD-ArbitraryOverwriteGDI. HackSys Extreme Vulnerable Driver - ArbitraryOverwrite Exploit using GDI

HSEVD-StackOverflow. HackSys Extreme Vulnerable Driver - StackOverflow Exploit

HSEVD-ArbitraryOverwrite. HackSys Extreme Vulnerable Driver - ArbitraryOverwrite Exploit

p0wnedReverse. PowerShell Runspace Connect-Back Shell

HSEVD-VariousExploits. HackSys Extreme Vulnerable Driver - Various Windows 7 x86 Kernel Exploits

HSEVD-StackCookieBypass. HackSys Extreme Vulnerable Driver - StackOverflow with Stack Cookie Bypass Exploit

HSEVD-StackOverflowGDI. HackSys Extreme Vulnerable Driver - Windows 10 x64 StackOverflow Exploit using GDI

HSEVD-ArbitraryOverwriteLowIL. HackSys Extreme Vulnerable Driver - ArbitraryOverwrite Exploit using GDI -> Low Integrity to System

HackTheBox-Jail. HTB Jail Remote Exploit By Cneeliz - 2017

HackTheBox-Smasher. Python

FortiParse. Fortigate Configuration Parser

Tater. Tater is a PowerShell implementation of the Hot Potato Windows Privilege Escalation exploit from @breenmachine and @foxglovesec

Potato. Windows privilege escalation through NTLM Relay and NBNS Spoofing

AggressorScripts-1. Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources

Inveigh. Inveigh is a Windows PowerShell LLMNR/NBNS spoofer with challenge/response capture over HTTP/SMB

snarf. Snarf man-in-the-middle / relay suite