Flangvik / RosFuscator
YouTube/Livestream project for obfuscating C# source code using Roslyn
☆124Updated 3 years ago
Alternatives and similar repositories for RosFuscator:
Users that are interested in RosFuscator are comparing it to the libraries listed below
- C# implementation of the token privilege removal flaw discovered by @GabrielLandau/Elastic☆142Updated 3 years ago
- GhostLoader - AppDomainManager - Injection - 攻壳机动队☆155Updated 4 years ago
- Managed code hooking template.☆130Updated 3 years ago
- Small POC written in C# that performs shellcode injection on x64 processes using direct syscalls as a way to bypass user-land EDR hooks.☆82Updated 5 years ago
- C# code to Sandbox Defender (and most probably other AV/EDRs).☆163Updated 2 years ago
- Using DInvoke to patch AMSI.dll in order to bypass AMSI detections triggered when loading .NET tradecraft via Assembly.Load().☆215Updated 5 years ago
- NativePayload_CallBackTechniques C# Codes (Code Execution via Callback Functions Technique, without CreateThread Native API)☆117Updated last year
- ☆38Updated 2 years ago
- Read Excel Spreadsheets (XLS/XLSX) using Cobalt Strike's Execute-Assembly☆89Updated 6 months ago
- DInvisibleRegistry☆82Updated 4 years ago
- Dynamically invoke arbitrary unmanaged code from managed code without P/Invoke.☆154Updated last year
- Implementation of b4rtiks's SharpMiniDump using NTFS transactions to avoid writting the minidump to disk and exfiltrating it via HTTPS us…☆70Updated 4 years ago
- Dump stuff without touching disk☆162Updated 4 years ago
- Tool for interacting with outlook interop during red team engagements☆143Updated 3 years ago
- C# port of the Get-AppLockerPolicy PS cmdlet☆98Updated 2 years ago
- PoC to demonstrate how CLR ETW events can be tampered.☆187Updated 5 years ago
- An example of using Syscalls in C# to get a meterpreter shell.☆108Updated 3 years ago
- .Net Assembly to block ETW telemetry in current process☆77Updated 4 years ago
- credential dump using foreshaw technique using SeTrustedCredmanAccessPrivilege☆123Updated 3 years ago
- Simple packer for arbitrary data using only .NET API calls. Produces a unique signature with every usage. Standalone program and library.…☆91Updated 5 years ago
- Modular C# framework to exfiltrate loot over secure and trusted channels.☆124Updated 3 years ago
- ☆184Updated 4 years ago
- D/Invoke port of UrbanBishop☆106Updated 4 years ago
- A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from …☆84Updated 4 years ago
- Source for tasks I have used with Covenant☆120Updated 4 years ago
- A lightweight .NET assembly dependency merger that uses dnLib and 7zip's LZMA SDK for compressing dependant assemblies.☆99Updated 6 months ago
- InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assem…☆188Updated 3 years ago
- ☆142Updated 2 years ago
- AMSI Bypass Via the Heap☆106Updated 4 years ago
- Simple PoC demonstrating syscall execution in C#☆154Updated 4 years ago