Identifies the bytes that Microsoft Defender flags on.

Collection of Offensive C# Tooling

Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.

Command and Control Framework written in C#

Exposing CharmingKitten's malicious activity for IRGC-IO Counterintelligence division (1500)

Disconnected RSAT - A method of running Group Policy Manager, Certificate Authority and Certificate Templates MMC snap-ins from non-domain joined machies

Dynamically invoke arbitrary unmanaged code from managed code without P/Invoke.

Lateral Movement as loggedon User via Speech Named Pipe COM & ISpeechNamedPipe + COM Hijacking

a C# implementation for a shellcode loader that capable to bypass Cortex XDR and Sophos EDR.

C# Port Scanner

Developing an open source Windows EDR written in C & C++ & C#