PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

RunasCs - Csharp and open version of windows builtin runas.exe

Framework for Kerberos relaying

SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Directory Web Services (ADWS) protocol.

.NET post-exploitation toolkit for Active Directory reconnaissance and exploitation

AppXSVC Service race condition - privilege escalation