Ladon大型内网渗透扫描器，PowerShell、Cobalt Strike插件、内存加载、无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列表扫描等。网络资产探测32种协议(ICMP\NBT\DNS\MAC\SMB\WMI\SSH\HTTP\HTTPS\Exc…

Trying to tame the three-headed dog.

Deserialization payload generator for a variety of .NET formatters

Source from the Microsoft .NET Reference Source that represent a subset of the .NET Framework

Set of tools to analyze Windows sandboxes for exposed attack surface.

A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA based scripts.

Apache Log4net is a versatile, feature-rich, efficient logging API and backend for .NET

A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certificate service.

Find vulnerabilities in AD Group Policy, but do it better than Grouper2 did.

Exploit for EfsPotato(MS-EFSR EfsRpcOpenFileRaw with SeImpersonatePrivilege local privalege escalation vulnerability).

A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.

CobaltStrike Beacon written in .Net 4 用.net重写了stager及Beacon，其中包括正常上线、文件管理、进程管理、令牌管理、结合SysCall进行注入、原生端口转发、关ETW等一系列功能

Proxylogon & Proxyshell & Proxyoracle & Proxytoken & All exchange server history vulns summarization :)

A free and open-source .NET obfuscator using dnlib.

Tunnellable HTTP/HTTPS socks4a proxy written in C# and deployable via PowerShell

基于C#实现的获取微信数据库密钥的小工具

A .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities.

Exploit and detect tools for CVE-2020-0688

C# C2 Framework centered around Stage 1 operations

C Sharp codes of my blog.

Exploit for the CVE-2023-23397

weaponized tool for CVE-2020-17144

.NET debugger and assembly editor

A Red Team tool for remotely manipulating Group Policy Object(GPO), Organizational Unit(OU), GPLink and Security Filtering

Scans for .NET Deserialization Bugs in .NET Assemblies

Use smb2 protocol to detect remote computer os version, support win7/server2008-win10/server2019

A C# port of the MinHook API hooking library

Seay源代码审计系统2.1源码

ADSI based SA tool