Filip Dragović

DFSCoerce. Python

CVE-2023-21752. C++

CVE-2025-48799. C++

CVE-2023-36874. C++

IDiagnosticProfileUAC. C++

SysmonEoP. C

CVE-2023-29343. C

GamingServiceEoP. C++

CVE-2024-20656. C++

IFaultrepElevatedDataCollectionUAC. C++

CVE-2023-20178. C++

DiagTrackEoP. C

UserManagerEoP. C++

CVE-2023-36723. C++

Random. Random

ZoneAlarmLPE. Exploit for LPE in ZoneAlarm Antivirus/Firewall

GamingServiceEoP5. C++

MSIExecEoP. Arbitrary File Delete in Windows Installer before 10.0.19045.2193

RazerEoP. C++

CVE-2022-3368. C

ZoneAlarmEoP. Exploit for Arbitrary File Move vulnerability in ZoneAlarm AV

PICDumper. C

NtCreateToken. C++

VSSCopy. Small and dirty PoC for CVE-2021-36934

SQLEnum. Small tool for basic SQL Server enumeration in Active Directory Environment

LpksetupUAC. C++

VSSTrigger. Python

CVE-2025-60710. C++

UserManager_Read. C++

KExecDD. Admin to Kernel code execution using the KSecDD driver

binary-explotation. Python

Wh04m1001.

wmiexec-Pro. New generation of wmiexec.py

RasmanPotato. Abuse Impersonate Privilege from Service to SYSTEM like other potatoes do

CS-Remote-OPs-BOF. C

NamedPipePTH. Pass the Hash to a named pipe for token Impersonation

pen_300_osep_prep. Preparation guide for Offensive Security's PEN-300 course and OSEP certification exam

PrivFu. Kernel mode WinDbg extension and PoCs for token privilege investigation.

Responder. Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

BloodHound.py. A Python based ingestor for BloodHound

CVE-2023-28229. C