SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.

A repository with my notable code snippets for Offensive Security's PEN-300 (OSEP) course.

Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.

The Hunt for Malicious Strings

SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader

SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled by…

Writing custom backdoor payloads with C# - Defcon 27 Workshop

A method of bypassing EDR's active projection DLL's by preventing entry point exection

.NET DllExport with .NET Core support (aka 3F/DllExport aka DllExport.bat)

Spartacus DLL/COM Hijacking Toolkit

C# implementation of harmj0y's PowerView

PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN RPC interface. This is possible via other protocols as well.

A tool to elevate privilege with Windows Tokens

A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA based scripts.

A C# Command & Control framework

Methods for attacking KeePass 2.X databases, including extracting of encryption key material from memory.

Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding "Shadow Credentials" to the target account.

Find vulnerabilities in AD Group Policy, but do it better than Grouper2 did.

Retrieves exported functions from a legitimate DLL and generates a proxy DLL source code/template for DLL proxy loading or sideloading

StandIn is a small .NET35/45 AD post-exploitation toolkit

Process Injection

SharpWMI is a C# implementation of various WMI functionality.

Search tool to find specific files containing specific words, i.e. files containing passwords..

C# Script used for Red Team

"Golden" certificates

Proof-of-Concept tool to authenticate to an LDAP/S server with a certificate through Schannel

Cobalt Strike Shellcode Generator

A C# utility for interacting with SCCM

Rat Scanner a helpful tool for Escape from Tarkov.

C# Data Collector for the BloodHound Project, Version 3