StandIn is a small .NET35/45 AD post-exploitation toolkit

Dump lsass using only NTAPI functions by hand-crafting Minidump files (without MiniDumpWriteDump!!!)

OpSec-safe Powershell runspace from within C# (aka SharpPick) with AMSI, Constrained Language Mode and Script Block Logging disabled at startup

Dump lsass using only NTAPI functions creating 3 JSON and 1 ZIP file... and generate the MiniDump file later!

Moriarty is designed to enumerate missing KBs, detect various vulnerabilities, and suggest potential exploits for Privilege Escalation in Windows environments.

Okta Verify and Okta FastPass Abuse Tool

load shellcode without P/D Invoke and VirtualProtect call.

Deserialization payload generator for a variety of .NET formatters

C# tool to identify and exploit weaknesses within MSSQL instances in Active Directory environments