.NET debugger and assembly editor

.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

A wrapper executable that can run any executable as a Windows service, in a permissive license.

Unofficial revival of the well known .NET debugger and assembly editor, dnSpy

Trying to tame the three-headed dog.

Covenant is a collaborative .NET C2 framework for red teamers.

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

Phison 2251-03 (2303) Custom Firmware & Existing Firmware Patches (BadUSB)

Deserialization payload generator for a variety of .NET formatters

Network Analysis Tool

.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers

A self-hosted Fuzzing-As-A-Service platform

PingCastle - Get Active Directory Security at 80% in 20% of the time

Identifies the bytes that Microsoft Defender flags on.

Set of tools to analyze Windows sandboxes for exposed attack surface.

Download ScriptAnalyzer from PowerShellGallery

Active Directory certificate abuse.

Directory Services Internals (DSInternals) PowerShell Module and Framework

SharpSploit is a .NET post-exploitation library written in C#

Run PowerShell with rundll32. Bypass software restrictions.

Avalonia-based .NET Decompiler (port of ILSpy)

CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.

SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.

Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.

A .net OLE/COM viewer and inspector to merge functionality of OleView and Test Container

A tool to create a JScript file which loads a .NET v2 assembly from memory.

SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled by…

Also known by Microsoft as Knifecoat 🌶️