Michael Zhmaylo

Exploit-Street. Complete list of LPE exploits for Windows (starting from 2023)

PowershellKerberos. Some scripts to abuse kerberos using Powershell

LeakedWallpaper. Leak of any user's NetNTLM hash. Fixed in KB5040434

NtlmThief. Extracting NetNTLM without touching lsass.exe

Parasite-Invoke. Hide your P/Invoke signatures through other people's signed assemblies

TGSThief. My implementation of the GIUDA project in C++

psexec_noinstall. Repository contains psexec, which will help to exploit the forgotten pipe

SymProcAddress. Zero EAT touch way to retrieve function addresses (GetProcAddress on steroids)

WhoIsWho. Amazing whoami alternatives

Privileger. Privileger is a tool to work with Windows Privileges

DebugAmsi. DebugAmsi is another way to bypass AMSI through the Windows process debugger mechanism.

articles. Python

USB-Monitor. USB Monitor is a simple C# program that uses WMI to track information about newly connected and disconnected USB devices

PPLDescribe. Tool for obtaining information about PPL processes

WinCOMFuzzer. Component Object Model fuzzing

MemoryRegions. These are additional files to my paper about memory regions

DescribeTicket. Modified Version Of Describe Ticket with showing session key

ADCSCoercePotato. No creds needed...

rsockstun. reverse socks tunneler with ntlm and proxy support

rsockspipe. Tool for pivoting over SMB pipes

DomainPasswordSpray-BH-Integration. DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!

CrackMapExec. A swiss army knife for pentesting networks

NetExec. The Network Execution Tool

Sploit2Me. Автоматическое уведомление пользователей о появившихся уязвимостях в Telegram посредством извлечения данных с БДУ ФСТЭК

NovellaUrfu.

FormThief. Spoofing desktop login applications with WinForms and WPF

Link2Work. URFU Digital Portfolio 2024 Project

impacket-programming-manual. impacket编程手册

MzHmO.

Invoke-DOSfuscation. PowerShell

profiler-lateral-movement. Lateral Movement via the .NET Profiler