Microsoft PowerToys is a collection of utilities that supercharge productivity and customization on Windows

Video game library manager with support for wide range of 3rd party libraries and game emulation support, providing one unified interface for your games.

Remote Administration Tool for Windows

Technitium DNS Server

.NET deobfuscator and unpacker.

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

测试当前网络的 NAT 类型（STUN）

C# SCADA

.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers

PingCastle - Get Active Directory Security at 80% in 20% of the time

a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )

Identifies the bytes that Microsoft Defender flags on.

Set of tools to analyze Windows sandboxes for exposed attack surface.

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

Run PowerShell with rundll32. Bypass software restrictions.

Local Service to SYSTEM privilege escalation from Windows 7 to Windows 10 / Server 2019

Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS

PowerShell Runspace Post Exploitation Toolkit

Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources

SharpUp is a C# port of various PowerUp functionality.

A .net OLE/COM viewer and inspector to merge functionality of OleView and Test Container

A tool to create a JScript file which loads a .NET v2 assembly from memory.

SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled by…

SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader

Antivirus evasion project

A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA based scripts.

C# implementation of harmj0y's PowerView

.NET DllExport with .NET Core support (aka 3F/DllExport aka DllExport.bat)

A tool to elevate privilege with Windows Tokens

Scan files or process memory for CobaltStrike beacons and parse their configuration