Cn33liz

p0wnedShell

PowerShell Runspace Post Exploitation Toolkit

StarFighters

A JavaScript and VBScript Based Empire Launcher, which runs within their own embedded PowerShell Host.

MSBuildShell

MSBuildShell, a Powershell Host running within MSBuild.exe

CScriptShell

CScriptShell, a Powershell Host running within cscript.exe

JSMeter

JavaScript Reversed TCP Meterpreter Stager

TpmInitUACBypass

Bypassing User Account Control (UAC) using TpmInit.exe

VBSMeter

VBS Reversed TCP Meterpreter Stager

SmashedPotato

p0wnedLoader

MacroMeter

VBA Reversed TCP Meterpreter Stager

HSEVD-StackOverflowX64

HackSys Extreme Vulnerable Driver - Windows 10 x64 StackOverflow Exploit with SMEP Bypass

p0shKiller

MS17-012

MS17-012 - COM Session Moniker EoP Exploit running within MSBuild.exe

SharpCat

SharpCat - A Simple Reversed Command Shell which can be started using InstallUtil (Bypassing AppLocker)

EasySystem

Quick and dirty System (Power)Shell using NamedPipe impersonation.

TpmInitUACAnniversaryBypass

Bypassing User Account Control (UAC) using TpmInit.exe

HSEVD-ArbitraryOverwriteGDI

HackSys Extreme Vulnerable Driver - ArbitraryOverwrite Exploit using GDI

HSEVD-StackOverflow

HackSys Extreme Vulnerable Driver - StackOverflow Exploit

HSEVD-ArbitraryOverwrite

HackSys Extreme Vulnerable Driver - ArbitraryOverwrite Exploit

HSEVD-VariousExploits

HackSys Extreme Vulnerable Driver - Various Windows 7 x86 Kernel Exploits

HSEVD-StackCookieBypass

HackSys Extreme Vulnerable Driver - StackOverflow with Stack Cookie Bypass Exploit

HSEVD-StackOverflowGDI

HackSys Extreme Vulnerable Driver - Windows 10 x64 StackOverflow Exploit using GDI

HackTheBox-Jail

HTB Jail Remote Exploit By Cneeliz - 2017

HSEVD-ArbitraryOverwriteLowIL

HackSys Extreme Vulnerable Driver - ArbitraryOverwrite Exploit using GDI -> Low Integrity to System

HackTheBox-Smasher

FortiParse

Fortigate Configuration Parser

Tater

Tater is a PowerShell implementation of the Hot Potato Windows Privilege Escalation exploit from @breenmachine and @foxglovesec

Potato

Windows privilege escalation through NTLM Relay and NBNS Spoofing

AggressorScripts-1

Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources

Inveigh

Inveigh is a Windows PowerShell LLMNR/NBNS spoofer with challenge/response capture over HTTP/SMB