.NET debugger and assembly editor

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Unofficial revival of the well known .NET debugger and assembly editor, dnSpy

.NET deobfuscator and unpacker.

Fast persistent recoverable log and key-value store + cache, in C# and C++.

Virtual File System for Git: Enable Git at Enterprise Scale

PerfView is a CPU and memory performance-analysis tool

Dafny is a verification-aware programming language

A self-hosted Fuzzing-As-A-Service platform

.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers

PingCastle - Get Active Directory Security at 80% in 20% of the time

Set of tools to analyze Windows sandboxes for exposed attack surface.

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

Demo of the potential of C# for systems programming with the .NET native ahead-of-time compilation technology.

A set of .NET libraries for Windows implementing PInvoke calls to many native Windows APIs with supporting wrappers.

Run PowerShell with rundll32. Bypass software restrictions.

Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities

Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS

The IoT Edge OSS project

PowerForensics provides an all in one platform for live disk forensic analysis

SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.

The Hunt for Malicious Strings

Provides a .NET wrapper for the Windows Task Scheduler. It aggregates the multiple versions, provides an editor and allows for localization.

A tool to create a JScript file which loads a .NET v2 assembly from memory.

SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader

Fork of http://code.google.com/p/win-sshfs/

A multitasking monolithic Kernel based x86 targeting Operating System written in C# from scratch aiming for high-level implementation of drivers in managed environment.

Also known by Microsoft as Knifecoat 🌶️

C# implementation of harmj0y's PowerView

A library for creating, reading and editing PE files and .NET modules.