.NET debugger and assembly editor

.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

A Terminal Emulator based on UWP and web technologies.

Windows tray utility / filesystem watcher / launcher for Syncthing

Trying to tame the three-headed dog.

PingCastle - Get Active Directory Security at 80% in 20% of the time

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

Run PowerShell with rundll32. Bypass software restrictions.

Directory Services Internals (DSInternals) PowerShell Module and Framework

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.

DNN (formerly DotNetNuke) is the leading open source web content management platform (CMS) in the Microsoft ecosystem.

Remote Desktop Protocol .NET Console Application for Authenticated Command Execution

A C# Command & Control framework

Monitor creation, deletion and changes to LDAP objects live during your pentest or system administration!

SharpWMI is a C# implementation of various WMI functionality.

Tunnel TCP connections through a file

Find vulnerabilities in AD Group Policy, but do it better than Grouper2 did.

Original PoC for CVE-2023-32784

A tool which bypasses AMSI (AntiMalware Scan Interface) and PowerShell CLM (Constrained Language Mode) and gives you a FullLanguage PowerShell reverse shell.

Get file less command execution for lateral movement.

.Net port of the remote SAM + LSA Secrets dumping functionality of impacket's secretsdump.py

A tool that shows detailed information about named pipes in Windows

Emora is an OSINT tool like sherlock but with a GUI, which search for accounts by username across social networks

DavRelayUp - a universal no-fix local privilege escalation in domain-joined windows workstations where LDAP signing is not enforced (the default settings).

A .NET tool for exporting and importing certificates without touching disk.

一个浏览器数据（密码|历史记录|Cookie|书签|下载记录）的导出工具，支持主流浏览器。

A .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities.

PoC for a SMS-based shell. Send commands and receive responses over SMS from mobile broadband capable computers

SolarWinds Orion Account Audit / Password Dumping Utility