A C# tool with more flexibility to customize scheduled task for both persistence and lateral movement in red team operation

COM Hijacking VOODOO

SharpGen is a .NET Core console application that utilizes the Rosyln C# compiler to quickly cross-compile .NET Framework console applications or libraries.

Red Team oriented C# Simple HTTP & WebDAV Server with Net-NTLM hashes capture functionality

A command-line tool for reconnaissance and targeted write operations on Confluence and Jira instances.

Miscellaneous Tools

A tool for pointesters to find candies in SharePoint

C# POC to extract NetNTLMv1/v2 hashes from ETW provider

Lockless allows for the copying of locked files.

.NET 4.0 Project to interact with video, audio and keyboard hardware.

Beacon Object File & C# project to check LDAP signing

An open-source process injection enumeration tool written in C#

ABUSING WINDOWS TELEMETRY FOR PERSISTENCE

Abuse leaked token handles.

Modular C# framework to exfiltrate loot over secure and trusted channels.

Keylogger written in C#

SharpShell is a proof-of-concept offensive C# scripting engine that utilizes the Rosyln C# compiler to quickly cross-compile .NET Framework console applications or libraries.

An arXiv for, what I think, are the finest in hacker works

A C# port from Invoke-GhostTask

CLI monitor for windows process- & file activity

Example code samples from our ScriptBlock Smuggling Blog post

Credential Dumper

SuperSharpShares is a tool designed to automate enumerating domain shares, allowing for quick verification of accessible shares by your associated domain account.

Capture screenshots from .NET using .NET methods or Windows API calls

A tool to use novel locations to extract metadata from Office documents.

REST server that can analyze Kusto KQL queries against the Sentinel and Microsoft 365 Defender schemas.

Microsoft GPO Readiness Lateral Movement Detection Tool