Collection of Offensive C# Tooling

PowerForensics provides an all in one platform for live disk forensic analysis

SharpUp is a C# port of various PowerUp functionality.

CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.

SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.

A repository with my notable code snippets for Offensive Security's PEN-300 (OSEP) course.

TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts

Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.

A tool to create a JScript file which loads a .NET v2 assembly from memory.

An ASI plugin for Grand Theft Auto V, which allows running scripts written in any .NET language on the .NET Framework runtime in-game.

SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader

SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled by…

Also known by Microsoft as Knifecoat 🌶️

C# Data Collector for BloodHound

GUI for apktool, signapk, zipalign and baksmali utilities.

Spartacus DLL/COM Hijacking Toolkit

C# implementation of harmj0y's PowerView

PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN RPC interface. This is possible via other protocols as well.

A tool to elevate privilege with Windows Tokens

Framework for Kerberos relaying

Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding "Shadow Credentials" to the target account.

Kernel mode WinDbg extension and PoCs for token privilege investigation.

Fork of SafetyKatz that dynamically fetches the latest pre-compiled release of Mimikatz directly from gentilkiwi GitHub repo, runtime patches signatures and uses SharpSploit DInvoke to PE-Load into…

A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certificate service.

Updated ConfuserEX, an open-source, free obfuscator for .NET applications

Exploit for CVE-2022-21999 - Windows Print Spooler Elevation of Privilege Vulnerability (LPE)

Tool to analyze and test security in IPv4 and IPv6 data networks

SharpWMI is a C# implementation of various WMI functionality.

Dump Azure AD Connect credentials for Azure AD and Active Directory