PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Umbraco is a free and open source .NET content management system helping you deliver delightful digital experiences.

Trying to tame the three-headed dog.

The best C# command line parser that brings standardized *nix getopt style, for .NET. Includes F# support

Deserialization payload generator for a variety of .NET formatters

Identifies the bytes that Microsoft Defender flags on.

A source generator to add a user-defined set of Win32 P/Invoke methods and supporting types to a C# project.

A library containing all P/Invoke code so you don't have to import it every time. Maintained and updated to support the latest Windows OS.

A set of .NET libraries for Windows implementing PInvoke calls to many native Windows APIs with supporting wrappers.

Collection of Offensive C# Tooling

A .net OLE/COM viewer and inspector to merge functionality of OleView and Test Container

A tool to create a JScript file which loads a .NET v2 assembly from memory.

SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled by…

GUI for apktool, signapk, zipalign and baksmali utilities.

C# Data Collector for BloodHound

C# implementation of harmj0y's PowerView

A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA based scripts.

PowerShell rebuilt in C# for Red Teaming purposes

PoCs and tools for investigation of Windows process execution techniques

Framework for Kerberos relaying

Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding "Shadow Credentials" to the target account.

Kernel mode WinDbg extension and PoCs for token privilege investigation.

Fork of SafetyKatz that dynamically fetches the latest pre-compiled release of Mimikatz directly from gentilkiwi GitHub repo, runtime patches signatures and uses SharpSploit DInvoke to PE-Load into…

SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Directory Web Services (ADWS) protocol.

A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.

SharpWMI is a C# implementation of various WMI functionality.

Dynamically invoke arbitrary unmanaged code from managed code without PInvoke.

Checks running processes, process metadata, Dlls loaded into your current process and the each DLLs metadata, common install directories, installed services and each service binaries metadata, inst…

Dump lsass using only NTAPI functions by hand-crafting Minidump files (without MiniDumpWriteDump!!!)