Open source obfuscation tool for .NET assemblies

Local Service to SYSTEM privilege escalation from Windows 7 to Windows 10 / Server 2019

Phone Link / KDE Connect alternative

Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities

A repository with my notable code snippets for Offensive Security's PEN-300 (OSEP) course.

A method of bypassing EDR's active projection DLL's by preventing entry point exection

Also known by Microsoft as Knifecoat 🌶️

Hunts out CobaltStrike beacons and logs operator command output

StandIn is a small .NET35/45 AD post-exploitation toolkit

C# Script used for Red Team

Self-developed tools for Lateral Movement/Code Execution

Dump lsass using only NTAPI functions by hand-crafting Minidump files (without MiniDumpWriteDump!!!)

Dump lsass using only NTAPI functions creating 3 JSON and 1 ZIP file... and generate the MiniDump file later!

C# Azure Function with an HTTP trigger that generates obfuscated PowerShell snippets that break or disable AMSI for the current process.

Pass the Hash to a named pipe for token Impersonation

Red Team oriented C# Simple HTTP & WebDAV Server with Net-NTLM hashes capture functionality

Run shellcode from resource

Port of Invoke-Excel4DCOM

Example code samples from our ScriptBlock Smuggling Blog post