Automatically switches between the dark and light theme of Windows 10 and Windows 11

Run PowerShell with rundll32. Bypass software restrictions.

Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities

TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts

Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.

A method of bypassing EDR's active projection DLL's by preventing entry point exection

StandIn is a small .NET35/45 AD post-exploitation toolkit

C# Script used for Red Team

Self-developed tools for Lateral Movement/Code Execution

Moriarty is designed to enumerate missing KBs, detect various vulnerabilities, and suggest potential exploits for Privilege Escalation in Windows environments.

Red Team oriented C# Simple HTTP & WebDAV Server with Net-NTLM hashes capture functionality

Miscellaneous Tools

.NET 4.0 Project to interact with video, audio and keyboard hardware.

Modular C# framework to exfiltrate loot over secure and trusted channels.

Keylogger written in C#

CLI monitor for windows process- & file activity

Example code samples from our ScriptBlock Smuggling Blog post

Credential Dumper