Tools

dec0ne/krbrelayup

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

wh0amitz/petitpotato

Local privilege escalation via PetitPotam (Abusing impersonate privileges).

zblurx/impersonate-rs

Rusty Impersonate

foxlox/giuda

Ask a TGS on behalf of another user without password

dtrecherel/dnsspoof

A DNS spoofer tool written in Python3.

synacktiv/nord-stream

Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently supports…

otterhacker/m365pwned

Two WinForms GUI tools for enumerating, searching, and exfiltrating data from M365 environments using application-level OAuth tokens

m4rm0k/cve-2020-10135-bias

CVE 2020-10135 a.k.a BIAS (Bluetooth Impersonation Attack)

furqankhan1/cve-2019-13498

CVE-2019-13498

x48ps/cve-2026-8181

This vulnerability allows unauthenticated attackers who know a valid administrator username to impersonate that admin during REST API requests by…

sanupl/cve-2021-46067

CVE-2021-46067 - In Vehicle Service Management System 1.0 an attacker can steal the cookies leading to Full Account Takeover.

b0marek/cve-2023-4279

Repository for CVE-2023-4279 vulnerability.

meowmycks/trustme

BOF to impersonate TrustedInstaller via DISM API trigger and thread impersonation

mharjac/bad_ducky

Rubber Ducky compatible clone based on CJMCU BadUSB HW.