Tools

Markdown viewer - Total Commander Lister plugin and standalone executable

A small Windows utility that fixes audio device/output issues.

AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.

Windows utility to fix Outlook authentication dialog taskbar visibility

Tool that validates and optionally fixes files that prevent signing (MSIX) files with signtool

Leverage WindowsApp createdump tool to obtain an lsass dump

PowerShell Script to enable Image Creator option in the new Microsoft Paint (MSPaint)

Exploit for Ivanti Automation Manager CVE-2022-44569

Export Citrix FAS User Certificates with Private Key

commandline utility to compact a vhd

Extract PowerShell scripts from an Executable

Maps the Citrix Files Drive (typically S:\) for elevated processes

Extracts the original PowerShell scripts from a PowerGUI script executable

PowerShell cmdlet to Sign file(s) including APPX (UWP) packages using signtool from the SDK (prerequisite)

PowerShell commandlets to get CLSID from ProgId and vice versa

PowerShell script to switch AMD Adrenalin Drivers to Compute mode (for mining), will automatically detect AMD cards and will detect if they're currently in Graphics mode

An RD Gateway connection to Windows Server 2012 fails from a Windows 7 x64 laptop, traced to a…

Reverse engineering how the Dell (Quest) vWorkspace client encrypts .pit connection files,…

A from-scratch RC4 stream cipher implementation in PowerShell, since neither PowerShell nor…

Suppressing the Java mixed code security warning caused by partially signed applets, either…

An updated Citrix password encoder tool exposing a COM interface after /regserver…

No audio on a Citrix XenApp presentation PC turns out to be a separate Philips Audio Control…

A PowerShell script that parses exported RES Workspace Manager Building Block XML files to…

Setting an Application Compatibility flag in the registry so apps receive the username instead…

Replacing Windows File Protection files on Windows 2000, XP and Server 2003 reliably using the…

Limit Excel 2010 multi-threaded calculation on Citrix XenApp and RDS with the…

Reverse engineer Citrix IMA datastore password decryption in IDA Pro, tracing DSMaint through…

A small command-line tool that reads the DefaultPassword LSA secret from the SECURITY hive via…

Reproduce the Citrix Online plug-in traffic to the Web Interface, capturing config.xml and…

A no-argument command-line tool named LyncPass that dumps all stored credentials for the…

How the Lync 2010 client blocks second instances via a Global mutex and event in…

The RID Manager$ object stores rIDAvailablePool as an 8-byte Large Integer, letting you read…

Switch a Windows 7 system from ATA or IRRT to AHCI to gain TRIM, hot swapping, and…

A small command-line tool that computes the CRC16 checksum variant used in Volkswagen RNS 510…

Full code walkthrough for Windows XP/2003 autologon: building tokens with LsaLogonUser or…

AClientFix is a small command-line tool that restarts the Altiris Deployment Agent service…

Enable Fast User Switching on domain-joined Windows XP with the undocumented ForceFriendlyUI,…

Where the Default User Profile really lives in the registry ProfileList key, and why…

A small tool that edits the ShellFolder Attributes bitmask under HKEY_CLASSES_ROOT CLSID to…

Install the XenApp 5 CMC with a current JRE instead of the required 5.0 Update 9 by editing…

Scripting the driver signature warning setting for unattended Citrix XenApp 5 installs,…

A command-line tool that runs in a Remote Desktop or Citrix session and automatically accepts…

An updated ChDrvLetter command-line tool assigns drive letters by volume name, listing current…

A small command-line tool opens the Active Directory Users and Computers property sheet for…

A dependency-free command-line tool that detects the current Citrix published application or…

Display built-in Windows resource dialogs like the Active Directory Reset Password dialog from…

A small Delphi sample using IDirectoryObject and IDirectorySearch with rootDSE for serverless…

AddPrinter2 is a Vista-and-higher command-line tool that adds a printer connection by UNC path…

A Citrix Access Management Console install taking 45 minutes on XenApp 5 is caused by…

An interim LaunchRDP release recompiled in Delphi 2010 that finally adds the RDP Connection…

Unattended MSI installs of Citrix XenApp 5.0 on Server 2008 fail with 1603/1601 and Windows…

A small local executable that registers Shift+F2 to toggle a Citrix client between full screen…

A script that edits the OutlPrnt file to disable the Taskpad print option, fixing Outlook's…

Testing whether stopping the Group Policy Client Service with the RunAsSys tool as SYSTEM can…

The undocumented Restricted subdirectory under BaseNamedObjects lets you create and access…

Global and Local named object prefixes map to session BaseNamedObjects directories, and the…

Using the undocumented MOD_SAS hotkey and EnumDesktopWindows on the Winlogon desktop to…

Build a Credential Server for Fast User Switching using a GUID-named pipe registered under the…

How termsrv, csrss and winsrv.dll communicate over the SmSsWinStationApiPort LPC port and…

Run Java 1.5 and 1.6 side by side per application on a Citrix server without HKLM write access…

A small tool uses SystemParametersInfo and GetSystemMetrics to compute the correct desktop…

Using Process Monitor to trace the HideDesktopIcons registry keys and set per-GUID DWORD…

A download page hosting ProfMan.zip, a utility made available for readers of Remko Weijnen's…

WTSPing is a command-line tool built on the undocumented WinStationServerPing API that…

Vista SP1 restores the Windows 2008 utildll implementation, so JwaWinsta Safe functions again…

RunInSession, a command-line tool that launches a process in any Terminal Session by…

A custom Excel function GetAdsProp that searches any Active Directory field across the tree…

Retrieve a Terminal Server client IP address by calling WTSQuerySessionInformation with…

The supposedly new Vista SP1 WTSConnectSession and remote control APIs are just wtsapi32.dll…

A VBS script that clears growing SQL Server transaction logs, useful as a post-backup job when…

Losing copy and paste across Terminal Server sessions is caused by a broken clipboard chain…

A command-line tool that launches mstsc.exe with username, password, domain, and redirection…