
LocalPotato_CVE-2023-21746
Proof-of-concept exploit for Windows local privilege escalation (CVE-2023-21746) abusing NTLM local authentication to gain SYSTEM privileges via SMB…

Proof-of-concept exploit for Windows local privilege escalation (CVE-2023-21746) abusing NTLM local authentication to gain SYSTEM privileges via SMB…

A C2 post-exploitation framework

DLL Planting in the Slack 4.33.73 - CVE-2023-38820

Post-exploitation credential harvesting toolkit that injects into password managers and Windows utilities to capture credentials via DLL proxying,…

Proof-of-concept exploit for CVE-2021-1675 (PrintNightmare) targeting Windows Print Spooler. Uses msfvenom-generated malicious DLL delivered via SMB…

Passive UAC elevation using dll infection

Reflective PE packer.

Generate Proxy DLLs in Rust

Yet another PoC for https://www.wietzebeukema.nl/blog/hijacking-dlls-in-windows

find dll base addresses without PEB WALK

Activation Context Hijacking Evasion Tool

Lateral Movement Using DCOM and DLL Hijacking

Injects C# EXE or DLL Assembly into every CLR runtime and AppDomain of another process.

Local & remote Windows DLL Proxying

Feature-rich Post Exploitation Framework with Network Pivoting capabilities.

Reflective DLL to privesc from NT Service to SYSTEM using SeImpersonateToken privilege

PowerShell script for local privilege escalation via PrintNightmare (CVE-2021-34527). Injects a custom DLL payload to add a local admin user,…

Proof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-write path…