Microsoft PowerToys is a collection of utilities that help you customize Windows and streamline everyday tasks

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

.NET (WPF and Windows Forms) bindings for the Chromium Embedded Framework

Unofficial revival of the well known .NET debugger and assembly editor, dnSpy

A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. …

Deserialization payload generator for a variety of .NET formatters

Python Tools for Visual Studio

Sync your Outlook and Google calendars

C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527

The SBOM tool is a highly scalable and enterprise ready tool to create SPDX 2.2 compatible SBOMs for any variety of artifacts.

C# implementation of harmj0y's PowerView

DevSkim is a set of IDE plugins, language analyzers, and rules that provide security "linting" capabilities.

Scan files or process memory for CobaltStrike beacons and parse their configuration

Find vulnerabilities in AD Group Policy, but do it better than Grouper2 did.

A binary static analysis tool that provides security and correctness results for Windows Portable Executable and *nix ELF binary formats

.NET 4.0 CLR Project to retrieve Chromium data, such as cookies, history and saved logins.

CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.

Active Directory delegation management tool

Source Code Management Attack Toolkit

Proof-of-Concept for CVE-2023-38146 ("ThemeBleed")

Architecture as Code (AaC) framework that generates diagrams and lets you analyse Application Architecture. Inspired by C4 Model

WiMigrator is a command line tool for migrating work items between VSTS/TFS projects

Source Code Management Attack Toolkit

🍔 Restaurant Management App.

Intentionally Vulnerable Demo App: .NET MVC, WCF, WebAPI, Web Forms

FlowBlot is static code analysis benchmark project by Codethreat, including sink-source challenges grouped into various technical analysis concepts.