b4rtik

SharpKatz. Porting of mimikatz sekurlsa::logonpasswords, sekurlsa::ekeys and lsadump::dcsync commands

metasploit-execute-assembly. Custom Metasploit post module to executing a .NET Assembly from Meterpreter session

RedPeanut. RedPeanut is a small RAT developed in .Net Core 2 and its agent in .Net 3.5 / 4.0.

SharpMiniDump. Create a minidump of the LSASS process from memory

ATPMiniDump. Evading WinDefender ATP credential-theft

SharpAdidnsdump. c# implementation of Active Directory Integrated DNS dumping (authenticated user)

HiddenPowerShellDll. Batchfile

SharpLoadImage. Hide .Net assembly into png images

DonutSupport. RedPeanut Support Classes

PowerTheShell. PowerShell

juicy-potato. A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

p0wnedShell. PowerShell Runspace Post Exploitation Toolkit

RemotePotato0. Just another "Won't Fix" Windows Privilege Escalation from User to Domain Admin.

Zipper. Zipper, a CobaltStrike file and folder compression utility.

SCShell. Fileless lateral movement tool that relies on ChangeServiceConfigA to run command

viewgen. viewgen is a ViewState tool capable of generating both signed and encrypted payloads with leaked validation keys

HTTPS_CSharp_Server. Implementing a Multithreaded HTTP/HTTPS Debugging Proxy Server in C# xref. `https://www.codeproject.com/Articles/93301/Implementing-a-Multithreaded-HTTP-HTTPS-Debugging`

RoguePotato. Another Windows Local Privilege Escalation from Service Account to System

Mimikore. .NET 5 Single file Application

metasploit-framework. Metasploit Framework

AllTheThingsExec. Executes Blended Managed/Unmanged Exports

PrintNightmare. C

PowerShell-AD-Recon. PowerShell Scripts I find useful

SharpSploit. SharpSploit is a .NET post-exploitation library written in C#