Microsoft PowerToys is a collection of utilities that help you customize Windows and streamline everyday tasks

.NET debugger and assembly editor

🎬 ScreenToGif allows you to record a selected area of your screen, edit and save it as a gif or video.

The Unity Machine Learning Agents Toolkit (ML-Agents) is an open-source project that enables games and simulations to serve as environments for training intelligent agents using deep reinforcement …

.NET deobfuscator and unpacker.

Trying to tame the three-headed dog.

Covenant is a collaborative .NET C2 framework for red teamers.

微信客户端取证，可获取用户个人信息(昵称/账号/手机/邮箱/数据库密钥(用来解密聊天记录))；支持获取多用户信息，不定期更新新版本偏移，目前支持所有新版本、正式版本

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

Deserialization payload generator for a variety of .NET formatters

Wallpaper engine PKG extractor/TEX to image converter

PingCastle - Get Active Directory Security at 80% in 20% of the time

超级弱口令检查工具是一款Windows平台的弱口令审计工具，支持批量多线程检查，可快速发现弱密码、弱口令账号，密码支持和用户名结合进行检查，大大提高成功率，支持自定义服务端口和字典。

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

Directory Services Internals (DSInternals) PowerShell Module and Framework

Local Service to SYSTEM privilege escalation from Windows 7 to Windows 10 / Server 2019

A tool to view and extract the contents of an Windows Installer (.msi) file.

这是一个抓取浏览器密码的工具，后续会添加更多功能

Pillager是一个适用于后渗透期间的信息收集工具

A method of bypassing EDR's active projection DLL's by preventing entry point exection

A simple particle-based fluid simulation

Remote Desktop Protocol .NET Console Application for Authenticated Command Execution

Spartacus DLL/COM Hijacking Toolkit

C# implementation of harmj0y's PowerView

Hunts out CobaltStrike beacons and logs operator command output

Xshell全版本密码恢复工具

SharpDecryptPwd source, To Decrypt Navicat,Xmanager,Filezilla,Foxmail,WinSCP,etc

SharpWMI is a C# implementation of various WMI functionality.

CobaltStrike Beacon written in .Net 4 用.net重写了stager及Beacon，其中包括正常上线、文件管理、进程管理、令牌管理、结合SysCall进行注入、原生端口转发、关ETW等一系列功能