Covenant is a collaborative .NET C2 framework for red teamers.

.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers

Identifies the bytes that Microsoft Defender flags on.

Run PowerShell with rundll32. Bypass software restrictions.

Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

RunasCs - Csharp and open version of windows builtin runas.exe

Fork of http://code.google.com/p/win-sshfs/

Remote Desktop Protocol .NET Console Application for Authenticated Command Execution

PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN RPC interface. This is possible via other protocols as well.

Methods for attacking KeePass 2.X databases, including extracting of encryption key material from memory.

Dump Azure AD Connect credentials for Azure AD and Active Directory

An Active Directory audit utility

CScriptShell, a Powershell Host running within cscript.exe