PowerShell for every system!

🐝 A collection of awesome .NET core libraries, tools, frameworks and software

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

EF Core is a modern object-database mapper for .NET. It supports LINQ queries, change tracking, updates, and schema migrations.

One framework for creating powerful cross-platform games.

Unofficial revival of the well known .NET debugger and assembly editor, dnSpy

A framework that allows developers to cobble together a better UI for their own WPF applications with minimal effort.

All algorithms implemented in C#.

PixiEditor is a Universal Editor for all your 2D needs

Fast persistent recoverable log and key-value store + cache, in C# and C++.

Docker images and test runners that replicate the live AWS Lambda environment

Thoughtfully architected, obscenely fast, thoroughly enjoyable web services for all

Deserialization payload generator for a variety of .NET formatters

PeachPie - the PHP compiler and runtime for .NET and .NET Core

Set of tools to analyze Windows sandboxes for exposed attack surface.

Active Directory certificate abuse.

Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.

Collection of Offensive C# Tooling

The Hunt for Malicious Strings

SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.

Antivirus evasion project

Also known by Microsoft as Knifecoat 🌶️

A simple remote tool in C#.

Framework for Kerberos relaying

Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding "Shadow Credentials" to the target account.

Kernel mode WinDbg extension and PoCs for token privilege investigation.

Retrieves exported functions from a legitimate DLL and generates a proxy DLL source code/template for DLL proxy loading or sideloading