Omri Baso

RToolZ. A Stealthy Lsass Dumper - can abuse ProcExp152.sys driver to dump PPL Lsass, no dbghelp.lib calls.

WTSImpersonator. WTSImpersonator utilizes WTSQueryUserToken to steal user tokens by abusing the RPC Named Pipe "\\pipe\LSM_API_service"

BesoToken. A tool to Impersonate logged on users without touching LSASS (Including non-Interactive sessions).

DLLicous-MaliciousDLL. A generator for malicious DLL files for DLL Hijacking attacks

windows-privilege-escalation-cheat-sheet. Updating on a daily base.

besocurl. A library for HTTP / HTTPs request support SSPI and PAC file parsing(Automatic proxy settings detection)

JWT-Master. JWT Token Decoder - Forger - And Secret Key Brute Forcer

mobile-pt-scripts. A repo by your beloved pentester for mobile pentesting scripts both for Android and iOS

PROCEXP.sys_weaponized. C++

Invoke-Unconstrained. Python

Socks5Server. Windows C/C++ Socks5 Server

CVE-2022-22845-Exploit. Exploit for CVE-2022-22845 - Unauthenticated Admin Takeover On QXIP SIPCAPTURE Homer-App up to 1.4.27

PToolity. Python based script used for PT / Replacing the exisiting known tools

XSS-Payloads. List of advanced XSS payloads

msdn-code-gallery-microsoft. Samples from Microsoft teams for the MSDN Code Gallery