http://manshadow.org/
The code I have found on this site has passed me leaps and bounds ahead of where I normally would be. Includes source for a program like psexec (probably still undetectable) and information about remote execution and injecting an EXE into another EXE. Privilege escalation on NT-based OS's and more. Take a look.
Note: When you enter it says something about it being a DOD machine. DNS on the domain gives a "24.196.22.223", however, which means that it most likely is on a cable connection. So it's not DOD. It's just to scare script kids away.




