Movie organizer/manager for usenet and torrent users.

🖥️ P2P Remote Desktop - Portable, No Configuration or Installation Needed.

An MCP server that allows MCP clients like Claude Desktop or Cursor to perform actions in the Unity Editor

Open source obfuscation tool for .NET assemblies

An open-source, free protector for .NET applications

Run PowerShell with rundll32. Bypass software restrictions.

Local Service to SYSTEM privilege escalation from Windows 7 to Windows 10 / Server 2019

Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities

Squalr Memory Editor - Game Hacking Tool Written in C#

A repository with my notable code snippets for Offensive Security's PEN-300 (OSEP) course.

Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.

Also known by Microsoft as Knifecoat 🌶️

Antivirus evasion project

Hunts out CobaltStrike beacons and logs operator command output

Monitor creation, deletion and changes to LDAP objects live during your pentest or system administration!

Retrieves exported functions from a legitimate DLL and generates a proxy DLL source code/template for DLL proxy loading or sideloading

Loads any C# binary in mem, patching AMSI + ETW.

StandIn is a small .NET35/45 AD post-exploitation toolkit

🧰 A modern alternative to the Microsoft Assembly Binding Log Viewer (FUSLOGVW.exe)

Threadless Process Injection using remote function hooking.

Process Injection

.NET 4.0 CLR Project to retrieve Chromium data, such as cookies, history and saved logins.

C# Script used for Red Team

Self-developed tools for Lateral Movement/Code Execution

OpSec-safe Powershell runspace from within C# (aka SharpPick) with AMSI, Constrained Language Mode and Script Block Logging disabled at startup

.NET 2.0 CLR project to retrieve saved browser credentials from Google Chrome, Mozilla Firefox and Microsoft Internet Explorer/Edge.

Retrieve LAPS password from LDAP

A User Impersonation tool - via Token or Shellcode injection

A deobfuscation tool for Eazfuscator.

Pass the Hash to a named pipe for token Impersonation