w0rk3r's Windows Hacking Library

Tokenvator: A Tool to Elevate Privilege using Windows Tokens https://blog.netspi.com/tokenvator-a-tool-to-elevate-privilege-using-windows-tokens @WindowsHackingLibrary

PowerShell: How to get a list of all installed Software on Remote Computers https://sid-500.com/2018/04/02/powershell-how-to-get-a-list-of-all-installed-software-on-remote-computers @WindowsHackingLibrary

Pentester Windows NTFS tricks collection https://sec-consult.com/en/blog/2018/06/pentesters-windows-ntfs-tricks-collection/ @WindowsHackingLibrary

WMImplant Post-Exploitation – An Introduction https://www.fortynorthsecurity.com/wmimplant-post-exploitation-an-introduction @WindowsHackingLibrary

Weaponizing .SettingContent-ms Extensions for Code Execution https://www.trustedsec.com/2018/06/weaponizing-settingcontent @WindowsHackingLibrary

Exploring PowerShell AMSI and Logging Evasion https://www.mdsec.co.uk/2018/06/exploring-powershell-amsi-and-logging-evasion/ @WindowsHackingLibrary

Abusing SeLoadDriverPrivilege for privilege escalation https://www.tarlogic.com/en/blog/abusing-seloaddriverprivilege-for-privilege-escalation/ @WindowsHackingLibrary

A Password Spraying tool for Active Directory Credentials https://github.com/SpiderLabs/Spray @WindowsHackingLibrary

Simplifying Password Spraying https://www.trustwave.com/Resources/SpiderLabs-Blog/Simplifying-Password-Spraying/ @WindowsHackingLibrary

Automated AD and Windows test lab deployments with Invoke-ADLabDeployer https://outflank.nl/blog/2018/03/30/automated-ad-and-windows-test-lab-deployments-with-invoke-adlabdeployer/ @WindowsHackingLibrary

Scanning for Active Directory Privileges & Privileged Accounts https://adsecurity.org/?p=3658 @WindowsHackingLibrary

Getting Domain Admin with Kerberos Unconstrained Delegation http://www.labofapenetrationtester.com/2016/02/getting-domain-admin-with-kerberos-unconstrained-delegation.html @WindowsHackingLibrary

Windows Privilege Escalation Methods for Pentesters https://pentest.blog/windows-privilege-escalation-methods-for-pentesters/ @WindowsHackingLibrary

Powercat Netcat: The powershell version. https://github.com/besimorhino/powercat @WindowsHackingLibrary

MSDAT (Microsoft SQL Database Attacking Tool) is an open source penetration testing tool that tests the security of Microsoft SQL Databases remotely. https://github.com/quentinhardy/msdat @WindowsHackingLibrary

Extracting Service Account Passwords with Kerberoasting https://blog.stealthbits.com/extracting-service-account-passwords-with-kerberoasting/ @WindowsHackingLibrary

Hidden Administrative Accounts: BloodHound to the Rescue https://www.crowdstrike.com/blog/hidden-administrative-accounts-bloodhound-to-the-rescue/ @WindowsHackingLibrary

Empire Web v2 Launched, A Web Interface to Powershell empire. https://github.com/interference-security/empire-web @WindowsHackingLibrary

PowerShell Shellcode Injection on Win 10 (v1803) https://blog.cobaltstrike.com/2018/05/24/powershell-shellcode-injection-on-win-10-v1803/ @WindowsHackingLibrary

Jumping Network Segregation with RDP https://rastamouse.me/2017/08/jumping-network-segregation-with-rdp/ @WindowsHackingLibrary