a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )

TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts

.NET Project for Attacking vCenter

View ETW Provider manifest

UAC Bypass By Abusing Kerberos Tickets

A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other objects in the domain.

PoC for a SMS-based shell. Send commands and receive responses over SMS from mobile broadband capable computers

Abusing Azure services over C2

Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking

SharpSuccessor is a .NET Proof of Concept (POC) for fully weaponizing Yuval Gordon’s (@YuG0rd) BadSuccessor attack from Akamai.

Disconnected RSAT - A method of running Group Policy Manager, Certificate Authority and Certificate Templates MMC snap-ins from non-domain joined machies

C# POC to extract NetNTLMv1/v2 hashes from ETW provider

SharpClipHistory is a .NET application written in C# that can be used to read the contents of a user's clipboard history in Windows 10 starting from the 1809 Build.

Easy XOR string encryption for NET based binaries

Lateral Movement as loggedon User via Speech Named Pipe COM & ISpeechNamedPipe + COM Hijacking

C# porting of SysWhispers2. It uses SharpASM to find the code caves for executing the system call stub.