Windows software for sharing locally connected USB devices to other machines, including Hyper-V guests and WSL 2.

Run C# scripts from the .NET CLI.

.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers

A source generator to add a user-defined set of Win32 P/Invoke methods and supporting types to a C# project.

a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )

A repository with my notable code snippets for Offensive Security's PEN-300 (OSEP) course.

Writing custom backdoor payloads with C# - Defcon 27 Workshop

PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN RPC interface. This is possible via other protocols as well.

Framework for Kerberos relaying

Monitor creation, deletion and changes to LDAP objects live during your pentest or system administration!

A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certificate service.

Process Injection

Threadless Process Injection using remote function hooking.

SMBeagle - Fileshare auditing tool.

C# obfuscator that bypass windows defender

SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Directory Web Services (ADWS) protocol.

A tool which bypasses AMSI (AntiMalware Scan Interface) and PowerShell CLM (Constrained Language Mode) and gives you a FullLanguage PowerShell reverse shell.

Remote Kerberos Relay made easy! Advanced Kerberos Relay Framework

.NET project for installing Persistence

A .NET Framework 4.0 Windows Agent

LiquidSnake is a tool that allows operators to perform fileless lateral movement using WMI Event Subscriptions and GadgetToJScript

Identify the attack paths in BloodHound breaking your AD tiering

Okta Verify and Okta FastPass Abuse Tool

Dump lsass using only NTAPIS running 3 programs to create 3 JSON and 1 ZIP file... and generate the Minidump later!

Another meterpreter injection technique using C# that attempts to bypass Defender

comprehensive .NET tool designed to extract and display detailed information about Windows Defender exclusions and Attack Surface Reduction (ASR) rules without Admin privileges

Source generator to add D/Invoke and indirect syscall methods to a C# project.

Hookers are cooler than patches.

C# implementation of the research by @jonaslyk and the drafted PoC from @LloydLabs

C# binary with embeded golang hack-browser-data