PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Sudo for Windows

Trying to tame the three-headed dog.

Covenant is a collaborative .NET C2 framework for red teamers.

A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. …

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

Deserialization payload generator for a variety of .NET formatters

Tool to find metadata and hidden information in the documents.

Network Analysis Tool

Open source obfuscation tool for .NET assemblies

.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers

a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )

A source generator to add a user-defined set of Win32 P/Invoke methods and supporting types to a C# project.

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

OpenBullet reinvented

A set of .NET libraries for Windows implementing PInvoke calls to many native Windows APIs with supporting wrappers.

SharpSploit is a .NET post-exploitation library written in C#

The OpenBullet web testing application.

Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS

Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources

SharpUp is a C# port of various PowerUp functionality.

CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.

SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.

A repository with my notable code snippets for Offensive Security's PEN-300 (OSEP) course.

The Hunt for Malicious Strings

SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader

SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled by…

Writing custom backdoor payloads with C# - Defcon 27 Workshop

A method of bypassing EDR's active projection DLL's by preventing entry point exection