SharpADWS

(★ 603)

Active Directory reconnaissance and exploitation for Red Teams via the Active Directory Web Services (ADWS).

Owner Repos

KRBUACBypass ★ 515

UAC Bypass By Abusing Kerberos Tickets

C#
PetitPotato ★ 466

Local privilege escalation via PetitPotam (Abusing impersonate privileges).

C
S4UTomato ★ 405

Escalate Service Account To LocalSystem via Kerberos

C#
BypassCredGuard ★ 339

Credential Guard Bypass Via Patching Wdigest Memory

C++
TailVNC ★ 309

Tailscale-based Windows VNC persistence tool with Session 0 isolation bypass, embedding a full WireGuard peer and RFB server into a single drop-in binary.

Go
SharpRODC ★ 120

To audit the security of read-only domain controllers

C#

File Explorer

ZIP Download

Showing a partial file list — download the zip above to see everything.

  • README-ZH-CN.md
  • README.md
  • SharpADWS.sln

# Use via CDN

jsDelivr

jsDelivr serves any public GitHub repository as a CDN with zero setup. Pick a version and a file to get a ready-to-paste link and snippet.

Showing a partial file list.

Link
Example

Command Glossary

Commands referenced in this DOCs, explained below.

🔍

write

View Details ▼

Write data to memory.

write memory

Write current configuration to memory:

write {{username}} {{terminal_id}}

Send a message to a given user on a given terminal ID:

write {{username}} {{terminal_id}}

Send a message to a given user on a given terminal ID:

// repository documentation