Deserialization payload generator for a variety of .NET formatters

Set of tools to analyze Windows sandboxes for exposed attack surface.

Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources

Remote Desktop Protocol .NET Console Application for Authenticated Command Execution

PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN RPC interface. This is possible via other protocols as well.

Hunts out CobaltStrike beacons and logs operator command output

Windows protocol library, including SMB and RPC implementations, among others.

Use ICMLuaUtil to Bypass UAC!

Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking