Pinned Loading

1. CVE-2022-22845-Exploit CVE-2022-22845-Exploit Public

   Exploit for CVE-2022-22845 - Unauthenticated Admin Takeover On QXIP SIPCAPTURE Homer-App up to 1.4.27

   Python 2 1

2. RToolZ RToolZ Public

   A Stealthy Lsass Dumper - can abuse ProcExp152.sys driver to dump PPL Lsass, no dbghelp.lib calls.

   C 319 44

3. BesoToken BesoToken Public

   A tool to Impersonate logged on users without touching LSASS (Including non-Interactive sessions).

   C++ 93 14

4. WTSImpersonator WTSImpersonator Public

   WTSImpersonator utilizes WTSQueryUserToken to steal user tokens by abusing the RPC Named Pipe "\\pipe\LSM_API_service"

   PowerShell 118 17

5. Invoke-Unconstrained Invoke-Unconstrained Public

   Forked from ScorpionesLabs/Invoke-Unconstrained

   Python 2