itm4n

Privilege Escalation Enumeration Script for Windows

Abusing impersonation privileges through the "Printer Bug"

Dump the memory of a PPL with a userland exploit

A VBA implementation of the RunPE technique or how to bypass application whitelisting.

Recover the default privilege set of a LOCAL/NETWORK SERVICE account

Exploit for the RpcEptMapper registry key permissions vulnerability (Windows 7 / 2088R2 / 8 / 2012)

Controlling Windows PP(L)s

Windows - Weaponizing privileged file writes with the Update Session Orchestrator service

Dump the memory of any PPL with a Userland exploit chain

Bypass LSA protection using the BYODLL technique

Windows internals and exploitation tricks

Windows 10 CDPSvc DLL Hijacking - From LOCAL SERVICE to SYSTEM

Some random tools I use for penetration testing

Random CVEs