Cn33liz

p0wnedShell

PowerShell Runspace Post Exploitation Toolkit

StarFighters

A JavaScript and VBScript Based Empire Launcher, which runs within their own embedded PowerShell Host.

MSBuildShell

MSBuildShell, a Powershell Host running within MSBuild.exe

CScriptShell

CScriptShell, a Powershell Host running within cscript.exe

JSMeter

JavaScript Reversed TCP Meterpreter Stager

TpmInitUACBypass

Bypassing User Account Control (UAC) using TpmInit.exe

VBSMeter

VBS Reversed TCP Meterpreter Stager

SmashedPotato

p0wnedLoader

HSEVD-StackOverflowX64

HackSys Extreme Vulnerable Driver - Windows 10 x64 StackOverflow Exploit with SMEP Bypass

MacroMeter

VBA Reversed TCP Meterpreter Stager

p0shKiller

MS17-012

MS17-012 - COM Session Moniker EoP Exploit running within MSBuild.exe

SharpCat

SharpCat - A Simple Reversed Command Shell which can be started using InstallUtil (Bypassing AppLocker)

EasySystem

Quick and dirty System (Power)Shell using NamedPipe impersonation.

TpmInitUACAnniversaryBypass

Bypassing User Account Control (UAC) using TpmInit.exe

HSEVD-ArbitraryOverwriteGDI

HackSys Extreme Vulnerable Driver - ArbitraryOverwrite Exploit using GDI

HSEVD-StackOverflow

HackSys Extreme Vulnerable Driver - StackOverflow Exploit

HSEVD-ArbitraryOverwrite

HackSys Extreme Vulnerable Driver - ArbitraryOverwrite Exploit

HSEVD-VariousExploits

HackSys Extreme Vulnerable Driver - Various Windows 7 x86 Kernel Exploits

HSEVD-StackCookieBypass

HackSys Extreme Vulnerable Driver - StackOverflow with Stack Cookie Bypass Exploit

HSEVD-StackOverflowGDI

HackSys Extreme Vulnerable Driver - Windows 10 x64 StackOverflow Exploit using GDI

HackTheBox-Jail

HTB Jail Remote Exploit By Cneeliz - 2017

HSEVD-ArbitraryOverwriteLowIL

HackSys Extreme Vulnerable Driver - ArbitraryOverwrite Exploit using GDI -> Low Integrity to System

HackTheBox-Smasher

FortiParse

Fortigate Configuration Parser

Tater

Tater is a PowerShell implementation of the Hot Potato Windows Privilege Escalation exploit from @breenmachine and @foxglovesec

Potato

Windows privilege escalation through NTLM Relay and NBNS Spoofing

AggressorScripts-1

Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources

Inveigh

Inveigh is a Windows PowerShell LLMNR/NBNS spoofer with challenge/response capture over HTTP/SMB