Oliver Lyak

Certipy. Tool for Active Directory Certificate Services enumeration and abuse

PwnKit. Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation

CurveBall. PoC for CVE-2020-0601- Windows CryptoAPI (Crypt32.dll)

SpoolFool. Exploit for CVE-2022-21999 - Windows Print Spooler Elevation of Privilege Vulnerability (LPE)

SMBGhost. Scanner for CVE-2020-0796 - SMBv3 RCE

CallbackHell. Exploit for CVE-2021-40449 - Win32k Elevation of Privilege Vulnerability (LPE)

PassTheChallenge. Recovering NTLM hashes from Credential Guard

Pachine. Python implementation for CVE-2021-42278 (Active Directory Privilege Escalation)

BlueGate. PoC (DoS + scanner) for CVE-2020-0609 & CVE-2020-0610 - RD Gateway RCE

PetitPotam. Python implementation for PetitPotam

PrintNightmare. Python implementation for PrintNightmare (CVE-2021-1675 / CVE-2021-34527)

BloodHound. Fork of BloodHound with PKI nodes and edges for Certipy along with some minor personal improvements

Pypykatz. Modified version of Pypykatz to print encrypted credentials

Impacket. Modified version of Impacket to use dynamic NTLMv2 Challenge/Response

ldap3. Fork of LDAP3 supporting channel binding