Skip to content
View PHPPlay's full-sized avatar

Block or report PHPPlay

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don't include any personal information such as legal names or email addresses. Markdown supported. This note will be visible to only you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
62 stars written in C#
Clear filter

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

C# 18,971 3,322 Updated Dec 17, 2025

Cross Platform Terminal UI toolkit for .NET

C# 10,548 740 Updated Dec 22, 2025

Remote Administration Tool for Windows

C# 9,649 2,638 Updated Feb 29, 2024

.NET deobfuscator and unpacker.

C# 7,302 2,793 Updated Aug 29, 2020

Lightweight, low-ceremony, framework for building HTTP based services on .Net and Mono

C# 7,131 1,452 Updated Jan 24, 2021

Ladon大型内网渗透扫描器,PowerShell、Cobalt Strike插件、内存加载、无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell,支持批量A段/B段/C段以及跨网段扫描,支持URL、主机、域名列表扫描等。网络资产探测32种协议(ICMP\NBT\DNS\MAC\SMB\WMI\SSH\HTTP\HTTPS\Exc…

C# 5,225 898 Updated Mar 24, 2025

Trying to tame the three-headed dog.

C# 4,796 854 Updated Nov 14, 2025

C# as you know it but with Go-inspired tooling (small, selfcontained, and native executables)

C# 3,873 113 Updated Nov 13, 2025

An open-source, free protector for .NET applications

C# 3,732 1,713 Updated May 14, 2019

.NET language playground

C# 2,928 217 Updated Nov 18, 2024

.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers

C# 2,857 468 Updated Nov 19, 2025

PingCastle - Get Active Directory Security at 80% in 20% of the time

C# 2,711 329 Updated Oct 6, 2025

Identifies the bytes that Microsoft Defender flags on.

C# 2,560 469 Updated Sep 14, 2023

Download ScriptAnalyzer from PowerShellGallery

C# 2,064 407 Updated Dec 3, 2025

Run PowerShell with rundll32. Bypass software restrictions.

C# 1,817 261 Updated Mar 17, 2021

CIL to Javascript Compiler

C# 1,730 238 Updated Feb 28, 2018

Collection of Offensive C# Tooling

C# 1,466 255 Updated Feb 6, 2023

A tool to create a JScript file which loads a .NET v2 assembly from memory.

C# 1,308 302 Updated Jan 18, 2021

SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.

C# 1,239 203 Updated Aug 27, 2023

A method of bypassing EDR's active projection DLL's by preventing entry point exection

C# 1,163 164 Updated Mar 31, 2021

Spartacus DLL/COM Hijacking Toolkit

C# 1,071 153 Updated Feb 1, 2024

Convert code from C# to VB.NET and vice versa using Roslyn

C# 889 229 Updated Nov 26, 2025

Retrieves exported functions from a legitimate DLL and generates a proxy DLL source code/template for DLL proxy loading or sideloading

C# 864 110 Updated Jul 21, 2020
C# 607 61 Updated Oct 31, 2025

Tool to create hidden registry keys.

C# 492 96 Updated Oct 23, 2019

Obfuscator for .NET and Mono, with a customizable engine for building your own obfuscators.

C# 487 55 Updated Dec 15, 2025

DeadPotato is a windows privilege escalation utility from the Potato family of exploits, leveraging the SeImpersonate right to obtain SYSTEM privileges. This script has been customized from the ori…

C# 449 47 Updated Aug 17, 2024

Executable that mutates its own code

C# 394 110 Updated Jun 28, 2025

Astral-PE is a low-level mutator (Headers/EP obfuscator) for native Windows PE files (x32/x64)

C# 323 30 Updated Apr 26, 2025

Evil SQL Client (ESC) is an interactive .NET SQL console client with enhanced SQL Server discovery, access, and data exfiltration features. While ESC can be a handy SQL Client for daily tasks, it w…

C# 299 44 Updated Apr 25, 2023
Next