Tool for Active Directory Certificate Services enumeration and abuse

Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation

PoC for CVE-2020-0601- Windows CryptoAPI (Crypt32.dll)

Exploit for CVE-2022-21999 - Windows Print Spooler Elevation of Privilege Vulnerability (LPE)

Scanner for CVE-2020-0796 - SMBv3 RCE

Exploit for CVE-2021-40449 - Win32k Elevation of Privilege Vulnerability (LPE)

Recovering NTLM hashes from Credential Guard

Python implementation for CVE-2021-42278 (Active Directory Privilege Escalation)

PoC (DoS + scanner) for CVE-2020-0609 & CVE-2020-0610 - RD Gateway RCE

Python implementation for PetitPotam

Python implementation for PrintNightmare (CVE-2021-1675 / CVE-2021-34527)