n1xbyte / donutCS
dem sharp donuts
☆187Updated 2 years ago
Alternatives and similar repositories for donutCS:
Users that are interested in donutCS are comparing it to the libraries listed below
- ☆278Updated 4 years ago
- SMBExec C# module☆215Updated 4 years ago
- Using DInvoke to patch AMSI.dll in order to bypass AMSI detections triggered when loading .NET tradecraft via Assembly.Load().☆213Updated 4 years ago
- Create a minidump of the LSASS process from memory☆254Updated 2 years ago
- ☆209Updated 4 years ago
- RedPeanut is a small RAT developed in .Net Core 2 and its agent in .Net 3.5 / 4.0.☆327Updated last year
- This tool enables the compilation of a C# program that will execute arbitrary PowerShell code, without launching PowerShell processes thr…☆192Updated 4 years ago
- C# Shellcode Runner to execute shellcode via CreateRemoteThread and SetThreadContext to evade Get-InjectedThread☆118Updated 5 years ago
- CSHARP DCOM Fun☆125Updated 5 years ago
- Simple packer for arbitrary data using only .NET API calls. Produces a unique signature with every usage. Standalone program and library.…☆90Updated 5 years ago
- Managed code hooking template.☆128Updated 3 years ago
- WMI Event Subscription Persistence in C#☆112Updated 5 years ago
- SharpGen is a .NET Core console application that utilizes the Rosyln C# compiler to quickly cross-compile .NET Framework console applica…☆292Updated 3 years ago
- SharpShell is a proof-of-concept offensive C# scripting engine that utilizes the Rosyln C# compiler to quickly cross-compile .NET Framew…☆124Updated 6 years ago
- ☆349Updated 2 years ago
- Simple PoC demonstrating syscall execution in C#☆152Updated 4 years ago
- SharpCompile is an aggressor script for Cobalt Strike which allows you to compile and execute C# in realtime. This is a more slick approa…☆290Updated 4 years ago
- Constrained Language Mode + AMSI bypass all in one☆155Updated 5 years ago
- ☆179Updated 2 years ago
- .NET assembly local/remote loading/injection into memory.☆128Updated 5 years ago
- PoC to demonstrate how CLR ETW events can be tampered.☆184Updated 4 years ago
- C# port of WMImplant which uses either CIM or WMI to query remote systems☆196Updated 3 years ago
- Evading WinDefender ATP credential-theft☆254Updated 5 years ago
- .NET 4.0 Project to interact with video, audio and keyboard hardware.☆211Updated 5 years ago
- SharpTask is a simple code set to interact with the Task Scheduler service api and is compatible with Cobalt Strike.☆88Updated 3 years ago
- ☆131Updated 4 years ago
- Lateral Movement technique using DCOM and HTA☆230Updated 2 years ago
- ** DISCONTINUED ** C2 framework that uses Background Intelligent Transfer Service (BITS) as communication protocol and Direct Syscalls + …☆216Updated 2 years ago