b4rtik

SharpKatz

Porting of mimikatz sekurlsa::logonpasswords, sekurlsa::ekeys and lsadump::dcsync commands

metasploit-execute-assembly

Custom Metasploit post module to executing a .NET Assembly from Meterpreter session

RedPeanut

RedPeanut is a small RAT developed in .Net Core 2 and its agent in .Net 3.5 / 4.0.

ATPMiniDump

Evading WinDefender ATP credential-theft

SharpMiniDump

Create a minidump of the LSASS process from memory

SharpAdidnsdump

c# implementation of Active Directory Integrated DNS dumping (authenticated user)

HiddenPowerShellDll

SharpLoadImage

Hide .Net assembly into png images

DonutSupport

RedPeanut Support Classes

juicy-potato

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

RemotePotato0

Just another "Won't Fix" Windows Privilege Escalation from User to Domain Admin.

SCShell

Fileless lateral movement tool that relies on ChangeServiceConfigA to run command

viewgen

viewgen is a ViewState tool capable of generating both signed and encrypted payloads with leaked validation keys

Zipper

Zipper, a CobaltStrike file and folder compression utility.

AllTheThingsExec

Executes Blended Managed/Unmanged Exports

HTTPS_CSharp_Server

Implementing a Multithreaded HTTP/HTTPS Debugging Proxy Server in C# xref. `https://www.codeproject.com/Articles/93301/Implementing-a-Multithreaded-HTTP-HTTPS-Debugging`

JSRat-Py

This is my implementation of JSRat.ps1 in Python so you can now run the attack server from any OS instead of being limited to a Windows OS with Powershell enabled.

metasploit-framework

Metasploit Framework

Mimikore

.NET 5 Single file Application

PrintNightmare

RoguePotato

Another Windows Local Privilege Escalation from Service Account to System

SharpSploit

SharpSploit is a .NET post-exploitation library written in C#

Covenant

Covenant is a .NET command and control framework that aims to highlight the attack surface of .NET, make the use of offensive .NET tradecraft easier, and serve as a collaborative command and control platform for red teamers.

donutCS

dem sharp donuts

liferay-portal

mcfridafee

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

SIGRed_RCE_PoC

SigThief

Stealing Signatures and Making One Invalid Signature at a Time

stackbit-theme-fresh

Fresh a personal theme with a blog for Stackbit