Browser Protector against various stealers, written in C# & C/C++.

A .NET malware loader, using API-Hashing to evade static analysis

Weaponized HellsGate/SigFlip

DBeaver数据库密码解密工具

Source generator to add D/Invoke and indirect syscall methods to a C# project.

Different methods to get current username without using whoami

Exploitation of echo_driver.sys

Open-Source Remote Administration Tool For Windows C# (Be Based On AsyncRAT)

C# Utilities for Windows Notification Facility

Decrypt GlobalProtect configuration and cookie files.

A collection of various and sundry code snippets that leverage .NET dynamic tradecraft

A C# tool to output crackable DPAPI hashes from user MasterKeys

Simple rapper for Mimikatz, bypass Defender

Abuse leaked token handles.

域内密码喷射工具

Collection of scripts, binaries and the like to aid in WhiteList Evasion on a Microsoft Windows Network.

Lateral Movement

This lightweight C# demo application showcases interactive remote shell access via named pipes and the SMB protocol.

An aggressor script that can help automate payload building in Cobalt Strike

根据攻防以及域信息收集经验dump快而有用的域信息

Terminate AV/EDR leveraging BYOVD attack

Neton is a tool for getting information from Internet connected sandboxes

Silently Install Chrome Extension For Persistence

Alternative Shellcode Execution Via Callbacks Rewrite In C#

A collection of tools Neil and Andy have been working on released in one place and interlinked with previous tools

A Streamlined FTP-Driven Command and Control Conduit for Interconnecting Remote Systems.

Alternative Shellcode Execution Via Callbacks in C# with P/Invoke

This tool will allow you to bypass VMProtect .NET AntiDebugger. Made by Cabbo.

批量获取域内机器桌面文件