Clément Labro

PrivescCheck. Privilege Escalation Enumeration Script for Windows

PrintSpoofer. Abusing impersonation privileges through the "Printer Bug"

PPLdump. Dump the memory of a PPL with a userland exploit

VBA-RunPE. A VBA implementation of the RunPE technique or how to bypass application whitelisting.

FullPowers. Recover the default privilege set of a LOCAL/NETWORK SERVICE account

Perfusion. Exploit for the RpcEptMapper registry key permissions vulnerability (Windows 7 / 2088R2 / 8 / 2012)

UsoDllLoader. Windows - Weaponizing privileged file writes with the Update Session Orchestrator service

PPLcontrol. Controlling Windows PP(L)s

PPLmedic. Dump the memory of any PPL with a Userland exploit chain

PPLrevenant. Bypass LSA protection using the BYODLL technique

Pentest-Windows. Windows internals and exploitation tricks

CDPSvcDllHijacking. Windows 10 CDPSvc DLL Hijacking - From LOCAL SERVICE to SYSTEM

Pentest-Tools. Some random tools I use for penetration testing

CVEs. Random CVEs

itm4n.github.io. Personal blog

itm4n.