Oddments

Oddments is a repository of random code snippets used to develop proof of concepts for techniques used with the Windows operating system.

POCs

• HideConsole - Hide a console window so it isn't visible to users
• ListPrivs - Lists current privileges associated with a Primary process token
• MakeToken - Create a Windows Access Token for another user and use it to remotely list the files on a remote host
• RunAs - Run a program as another user; Includes netonly functionality
• StealToken - Steal a Windows Access Token from another process
• SSHClient - Execute commands and retrieve output through SSH (non-interactive)

Library

• pkg - Wrapper functions for interacting with the Windows API
  • privs - Functions dealing with Windows Privileges
  • process - Functions for working with Windows processes
  • tokens - Function for working with Windows Access Tokens
• windows - Windows API functions
  • advapi32 - Windows API functions exported in Advapi32.dll
  • kernel32 - Windows API functions exported in kernel32.dll
  • user32 - Windows API functions exported in user32.dll