Sudo for Windows

Open source obfuscation tool for .NET assemblies

An open-source, free protector for .NET applications

Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities

A repository with my notable code snippets for Offensive Security's PEN-300 (OSEP) course.

Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.

A method of bypassing EDR's active projection DLL's by preventing entry point exection

Retrieves exported functions from a legitimate DLL and generates a proxy DLL source code/template for DLL proxy loading or sideloading

StandIn is a small .NET35/45 AD post-exploitation toolkit

Process Injection

C# Script used for Red Team

C# Azure Function with an HTTP trigger that generates obfuscated PowerShell snippets that break or disable AMSI for the current process.

Managed code hooking template.

Windows Defender ShellCode Execution Bypass

Example code samples from our ScriptBlock Smuggling Blog post

This is a monorepo including codes from grey hat c# by no starch and some of my own research with it.