A Windows privilege-escalation tool that combines NBNS/WPAD spoofing with HTTP-to-SMB NTLM relay so a local SYSTEM authentication can be relayed to the local SMB service, creating a service that runs a supplied command as NT AUTHORITY\SYSTEM. The upstream README documents OS-specific triggers for Windows 7, 8/10, Server 2008, and Server 2012; behavior depends on WPAD and update timing.
C# / Python
RESTRICTED_ACCESS_BLUR_MARKER