A Dynamic MSBuild task to help with minor obfuscation of C# Binaries to evade static signatures on each compilation
☆38Dec 7, 2025Updated 3 months ago
Alternatives and similar repositories for DynamicMSBuilder
Users that are interested in DynamicMSBuilder are comparing it to the libraries listed below
Sorting:
- A simple rpc2socks alternative in pure Go.☆31Jul 8, 2024Updated last year
- Modify managed functions from unmanaged code☆53Feb 1, 2024Updated 2 years ago
- A C# port from Invoke-GhostTask☆120Jan 5, 2024Updated 2 years ago
- Lateral Movement☆126Nov 14, 2023Updated 2 years ago
- Exploitation of echo_driver.sys☆170Sep 16, 2023Updated 2 years ago
- Collection of self-made Red Team tools that have come in handy☆12Aug 25, 2024Updated last year
- A PoC .NET-specific process injection tool☆58Mar 17, 2024Updated 2 years ago
- ☆53Sep 23, 2025Updated 5 months ago
- Windows Service with the implementation of the Process hollowing technique to run shellcode☆14Jul 20, 2023Updated 2 years ago
- ApexLdr is a DLL Payload Loader written in C☆117Jul 17, 2024Updated last year
- ☆133Dec 4, 2023Updated 2 years ago
- A collection of various and sundry code snippets that leverage .NET dynamic tradecraft☆145May 18, 2024Updated last year
- Remote code execution in Power Platform connectors via JSON deserialization☆23Mar 30, 2023Updated 2 years ago
- Patches the AmsiScan function in clr.dll allowing for unrestricted assembly loading in .NET☆51May 5, 2025Updated 10 months ago
- reflectively load and execute PEs locally and remotely bypassing EDR hooks☆164Jan 4, 2024Updated 2 years ago
- ☆14Sep 26, 2023Updated 2 years ago
- PoC script to demonstrate collection of SCCM attack paths that can be viewed in BH with OpenGraph☆24Aug 2, 2025Updated 7 months ago
- A set of rootkit-like abilities for unprivileged users, and vulnerabilities based on the DOT-to-NT path conversion known issue☆108Apr 18, 2024Updated last year
- Reflective DLL to privesc from NT Service to SYSTEM using SeImpersonateToken privilege☆225Nov 23, 2023Updated 2 years ago
- Running .NET from VBA☆148Feb 11, 2023Updated 3 years ago
- this repo is to cover the other undocumented or published / in different langaue to achieve shellcode injection via windows callback func…☆88Jun 24, 2022Updated 3 years ago
- .NET Post-Exploitation Utility for Abusing Strong Explicit Certificate Mappings in ADCS☆150Feb 10, 2025Updated last year
- C# version of NTLMRawUnHide☆72Oct 8, 2022Updated 3 years ago
- Automated .NET AppDomain hijack payload generation☆129Feb 4, 2025Updated last year
- Simple EDR that injects a DLL into a process to place a hook on specific Windows API☆97Aug 27, 2023Updated 2 years ago
- ☆342Nov 10, 2025Updated 4 months ago
- ☆46Jun 21, 2023Updated 2 years ago
- ☆224Oct 22, 2023Updated 2 years ago
- DLL proxy load example using the Windows thread pool API, I/O completion callback with named pipes, and C++/assembly☆63Mar 19, 2024Updated 2 years ago
- C# API for Nidhogg rootkit☆21Apr 25, 2024Updated last year
- Decrypt Veeam database passwords☆221Dec 8, 2025Updated 3 months ago
- Hide your P/Invoke signatures through other people's signed assemblies☆211Mar 10, 2024Updated 2 years ago
- An App Domain Manager Injection DLL PoC on steroids☆212Dec 14, 2023Updated 2 years ago
- ☆60Dec 15, 2023Updated 2 years ago
- ☆19Nov 28, 2024Updated last year
- ☆197Mar 19, 2020Updated 6 years ago
- Abuse leaked token handles.☆136Dec 14, 2023Updated 2 years ago
- Read the contents of MS Word Documents using Cobalt Strike's Execute-Assembly☆117Sep 30, 2024Updated last year
- About C# loader that copies a chunk at the time of the shellcode in memory in a suspended process, rather that all at once☆13Jul 14, 2022Updated 3 years ago