
UACElevator
Passive UAC elevation using dll infection

Passive UAC elevation using dll infection

Proof-of-concept exploit for CVE-2024-31771 demonstrating arbitrary file write in TotalAV via symbolic link attack, enabling DLL planting and SYSTEM…

A session-0 capable dll injection utility

Proof-of-concept C# exploit for CVE-2021-1675 (Windows Print Spooler elevation of privilege), accepting custom driver and DLL paths for targeted…

Proof-of-concept exploit for a local privilege escalation vulnerability in Datacard XPS Card Printer Driver via insecure file permissions and DLL…

Yet another PoC for https://www.wietzebeukema.nl/blog/hijacking-dlls-in-windows

Activation Context Hijacking Evasion Tool

Injects C# EXE or DLL Assembly into every CLR runtime and AppDomain of another process.

Local & remote Windows DLL Proxying

Impacket-based exploit for PrintNightmare (CVE-2021-1675/CVE-2021-34527) enabling remote DLL execution via SMB, with scanning and mitigation guidance.

Impacket-based exploit for CVE-2021-1675 (PrintNightmare) enabling remote or local DLL execution on Windows Domain Controllers with SMB payload…

Impacket-based exploit for PrintNightmare (CVE-2021-1675/34527) enabling remote or local DLL execution against Windows print spooler services.

Feature-rich Post Exploitation Framework with Network Pivoting capabilities.

Reflective DLL to privesc from NT Service to SYSTEM using SeImpersonateToken privilege

Local privilege escalation exploit for CVE-2021-1675 (PrintNightmare) that installs a malicious DLL to gain SYSTEM access on vulnerable Windows…

CVE-2021-34527 AddPrinterDriverEx() Privilege Escalation

PowerShell script for local privilege escalation via PrintNightmare (CVE-2021-34527). Injects a custom DLL payload to add a local admin user,…

Proof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-write path…