Microsoft PowerToys is a collection of utilities that help you customize Windows and streamline everyday tasks

Ladon大型内网渗透扫描器，PowerShell、Cobalt Strike插件、内存加载、无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列表扫描等。网络资产探测32种协议(ICMP\NBT\DNS\MAC\SMB\WMI\SSH\HTTP\HTTPS\Exc…

Trying to tame the three-headed dog.

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

Phison 2251-03 (2303) Custom Firmware & Existing Firmware Patches (BadUSB)

Deserialization payload generator for a variety of .NET formatters

Tool to find metadata and hidden information in the documents.

Network Analysis Tool

.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers

😉 用于在插上U盘后自动按需复制该U盘的文件。”备份&偷U盘文件的神器”（写作USBCopyer，读作USBCopier）

掩日 - 免杀执行器生成工具

PingCastle - Get Active Directory Security at 80% in 20% of the time

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527

SharpSploit is a .NET post-exploitation library written in C#

Run PowerShell with rundll32. Bypass software restrictions.

Local Service to SYSTEM privilege escalation from Windows 7 to Windows 10 / Server 2019

PowerShell Runspace Post Exploitation Toolkit

Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources

Collection of Offensive C# Tooling

这是一个抓取浏览器密码的工具，后续会添加更多功能

CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.

Fake Windows logon screen to steal passwords

The Hunt for Malicious Strings

RunasCs - Csharp and open version of windows builtin runas.exe

A tool to create a JScript file which loads a .NET v2 assembly from memory.

SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader

Remote Desktop Protocol .NET Console Application for Authenticated Command Execution

C# implementation of harmj0y's PowerView

PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN RPC interface. This is possible via other protocols as well.