decoder-it — Vaya

LocalPotato. C++

707

psgetsystem. getsystem via parent process using ps1 & embeded c#

496

KrbRelayEx. C#

388

ADCSCoercePotato. C++

248

KrbRelay-SMBServer. C#

238

printerbugnew. The DCERPC only printerbug.py version

232

KrbRelayEx-RPC. C#

201

TokenStealer. C++

164

powershellveryless. Constrained Language Mode + AMSI bypass all in one

155

ChgPass. C

137

NetworkServiceExploit. POC for NetworkService PrivEsc

130

juicy_2. juicypotato for win10 > 1803 & win server 2019

98

whoami-priv-Hackinparis2019. Slides from my talk in "Hackinparis" 2019 edition

91

psportfwd. a simple portforwarder in ps1 with embeded c# code

90

juicy-potato. A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

66

RelabelAbuse. C++

63

pipeserverimpersonate. named pipe server with impersonation

59

Hyper-V-admin-EOP. Small POC in powershell exploiting hardlinks during the VM deletion process

56

impacket-partial-mic. Impacket with --remove-mic-partial

46

Troopers24.

44

DFSCoerce-exe-2. DFSCoerce exe revisited version with custom authentication

43

NewMachineAccount. C#

39

whoami-priv. Slides from my talk "whoami /priv" at Romhack 2018

39

BadBackupOperator. C++

37

diaghub_exploit. Simplified version of Forshaw's Diaghub Collector Exploit

31

bluehatil22. Slides from out talk at BH IL 2022

28

CreateTokenExample. C++

17

TestComputerSpnDNS. Simple powershell script to tests for "GHOST" SPN's

17

lonelypotato. Switch to JuicyPotato! https://github.com/decoder-it/juicy-potato

12

hacktivity2019. Slides from my presentation at Budapest

8

JuicyPotatoNG. Another Windows Local Privilege Escalation from Service Account to System

3

RoguePotato. Another Windows Local Privilege Escalation from Service Account to System

1

redteam-research. Collection of PoC and offensive techniques used by the BlackArrow Red Team

1

whoami-priv-slides-budapest-2019.

1