Microsoft PowerToys is a collection of utilities that help you customize Windows and streamline everyday tasks

A modern file manager that helps users organize their files and folders.

.NET debugger and assembly editor

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Automatically switches between the dark and light theme of Windows 10 and Windows 11

.NET deobfuscator and unpacker.

Trying to tame the three-headed dog.

PerfView is a CPU and memory performance-analysis tool

Covenant is a collaborative .NET C2 framework for red teamers.

Deserialization payload generator for a variety of .NET formatters

Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Pers…

.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers

PingCastle - Get Active Directory Security at 80% in 20% of the time

a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )

Identifies the bytes that Microsoft Defender flags on.

Directory Services Internals (DSInternals) PowerShell Module and Framework

SharpSploit is a .NET post-exploitation library written in C#

Run PowerShell with rundll32. Bypass software restrictions.

Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS

Collection of Offensive C# Tooling

SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.

TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts

Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.

The Hunt for Malicious Strings

SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled by…

SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.