SharpSystemTriggers

Collection of remote authentication triggers coded in C# using MIDL compiler for avoiding 3rd party dependencies.

Midl2Bytes

For easy converting MIDL output to C# byte array.

One liner to get function call and call ID (cat ms-rprn_c.c | sls '/* Procedure .* ' -Context 0,10) | foreach-object {$_.matches.value.replace(' Procedure ','') + " " + ($_.Context.PostContext | sls '^\/\*')[0].Line.Split()[1]}

SharpEfsTrigger

C# Implementation of MS-EFS RPC

SharpSpoolTrigger

C# Implementation of MS-RPRN RPC

SharpDcomTrigger

C# Implementation of DCOM Potato triggers

Acknowledgements

• PetitPotam by topotam
• SpoolSample by Lee Christensen
• EfsPotato by zcgonvh
• pingcastle by vletoux
• All the potato devs
• tiraniddo