Elad Shamir

Internal-Monologue. Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS

Whisker. Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding "Shadow Credentials" to the target account.

RPC-Backdoor. A basic emulation of an "RPC Backdoor"

BadWindowsService. An insecurely implemented and installed Windows service for emulating elevation of privileges vulnerabilities

SharpElevator. SharpElevator is a C# implementation of Elevator for UAC bypass. This UAC bypass was originally discovered by James Forshaw and published in his brilliant post at: https://googleprojectzero.blogspot.com/2019/12/calling-local-windows-rpc-servers-from.html

CreateRelativePathShortcut. This is a simple program that generates shortcuts (MS-SHLLINK) with relative paths