Mor Davidovich

KrbRelayUp. KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

HWSyscalls. HWSyscalls is a new method to execute indirect syscalls using HWBP, HalosGate and a synthetic trampoline on kernel32 with HWBP.

DavRelayUp. DavRelayUp - a universal no-fix local privilege escalation in domain-joined windows workstations where LDAP signing is not enforced (the default settings).

ShadowSpray. A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other objects in the domain.

DllNotificationInjection. A POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and remote processes.

AMS-BP. AMSI Bypass for powershell

PowerSploit. PowerSploit - A PowerShell Post-Exploitation Framework

Recon-ng-Modules. Recon-ng modules for basic OSINT.

evilgophish. evilginx2 + gophish

Dec0ne.github.io. :sparkles: Build a beautiful and simple website in literally minutes. Demo at http://deanattali.com/beautiful-jekyll