w0rk3r's Windows Hacking Library

From Kekeo to Rubeus https://posts.specterops.io/from-kekeo-to-rubeus-86d2ec501c14 https://github.com/GhostPack/Rubeus @WindowsHackingLibrary

SharpBox is a C# tool for compressing, encrypting, and exfiltrating data to DropBox using the DropBox API https://github.com/P1CKLES/SharpBox @WindowsHackingLibrary

SMB hash hijacking & user tracking in MS Outlook https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2018/may/smb-hash-hijacking-and-user-tracking-in-ms-outlook @WindowsHackingLibrary

L1TF (Foreshadow) VM guest to host memory read PoC https://github.com/gregvish/l1tf-poc @WindowsHackingLibrary

Command and Control Using Active Directory http://www.harmj0y.net/blog/powershell/command-and-control-using-active-directory @WindowsHackingLibrary

A Lesson in .NET Framework Versions https://rastamouse.me/2018/09/a-lesson-in-.net-framework-versions @WindowsHackingLibrary

Faster Domain Escalation using LDAP https://blog.netspi.com/faster-domain-escalation-using-ldap @WindowsHackingLibrary

Introducing SharpSploit: A C# Post-Exploitation Library https://posts.specterops.io/introducing-sharpsploit-a-c-post-exploitation-library-5c7be5f16c51 @WindowsHackingLibrary

Poking Around With 2 lsass Protection Options https://medium.com/red-teaming-with-a-blue-team-mentaility/poking-around-with-2-lsass-protection-options-880590a72b1a @WindowsHackingLibrary

Using Mimikatz From a JSP shell https://blog.securitycompass.com/whiteboard-wednesday-using-mimikatz-from-a-jsp-shell-54f8a21693cc @WindowsHackingLibrary

Multiple Ways to Bypass UAC using Metasploit http://www.hackingarticles.in/multiple-ways-to-bypass-uac-using-metasploit @WindowsHackingLibrary

From OSINT to Internal: Gaining Domain Admin from Outside the Perimeter https://www.coalfire.com/The-Coalfire-Blog/Sept-2018/From-OSINT-to-Internal-Gaining-Domain-Admin @WindowsHackingLibrary

How to add a module in Mimikatz? https://littlesecurityprince.com/security/2018/03/18/ModuleMimikatz.html @WindowsHackingLibrary

Exploiting STOPzilla AntiMalware Arbitrary Write Vulnerability using SeCreateTokenPrivilege http://www.greyhathacker.net/?p=1025 @WindowsHackingLibrary

Bypassing AppLocker Custom Rules https://0x09al.github.io/security/applocker/bypass/custom/rules/windows/2018/09/13/applocker-custom-rules-bypass.html @WindowsHackingLibrary

CVE-2018-8420 - Microsoft XML Core Services MSXML RCE through web browser PoC https://github.com/Theropord/CVE-2018-8420 @WindowsHackingLibrary

You can't contain me! :: Analyzing and Exploiting an Elevation of Privilege Vulnerability in Docker for Windows https://srcincite.io/blog/2018/08/31/you-cant-contain-me-analyzing-and-exploiting-an-elevation-of-privilege-in-docker-for-windows.html @WindowsHackingLibrary

A PowerShell example of the Windows zero day priv esc https://github.com/OneLogicalMyth/zeroday-powershell/blob/master/README.md @WindowsHackingLibrary

A detailed technical explanation of CVE-2018-8120 https://xiaodaozhi.com/exploit/156.html @WindowsHackingLibrary

DDE Downloaders, Excel Abuse, and a PowerShell Backdoor http://rinseandrepeatanalysis.blogspot.com/2018/09/dde-downloaders-excel-abuse-and.html @WindowsHackingLibrary