xorrior / Random-CSharpTools
Collection of CSharp Assemblies focused on Post-Exploitation Capabilities
☆227Updated 5 years ago
Alternatives and similar repositories for Random-CSharpTools:
Users that are interested in Random-CSharpTools are comparing it to the libraries listed below
- ☆279Updated 4 years ago
- Lateral Movement technique using DCOM and HTA☆231Updated 2 years ago
- SharpCompile is an aggressor script for Cobalt Strike which allows you to compile and execute C# in realtime. This is a more slick approa…☆290Updated 4 years ago
- A Bring Your Own Land Toolkit that Doubles as a WMI Provider☆285Updated 6 years ago
- The project is designed as a file resource cloner. Metadata, including digital signature, is extracted from one file and injected into a…☆343Updated 4 months ago
- dem sharp donuts☆193Updated 2 years ago
- RedPeanut is a small RAT developed in .Net Core 2 and its agent in .Net 3.5 / 4.0.☆327Updated last year
- DEPRECATED SharpRoast is a C# port of various PowerView's Kerberoasting functionality.☆252Updated 6 years ago
- Create a minidump of the LSASS process from memory☆260Updated 2 years ago
- ☆348Updated 3 years ago
- MSBuildShell, a Powershell Host running within MSBuild.exe☆287Updated 5 years ago
- AndrewSpecial, dumping lsass' memory stealthily and bypassing "Cilence" since 2019.☆386Updated 5 years ago
- ☆216Updated 7 years ago
- ☆228Updated 6 years ago
- Powershell script for enumerating vulnerable DCOM Applications☆257Updated 6 years ago
- Trigen is a Python script which uses different combinations of Win32 function calls in generated VBA to execute shellcode.☆204Updated 7 years ago
- Evading WinDefender ATP credential-theft☆254Updated 5 years ago
- ☆253Updated 6 years ago
- A library for integrating communication channels with the Cobalt Strike External C2 server☆285Updated 7 years ago
- A tool to run .Net DLLs from the command line☆102Updated 6 years ago
- ** DISCONTINUED ** C2 framework that uses Background Intelligent Transfer Service (BITS) as communication protocol and Direct Syscalls + …☆214Updated 2 years ago
- Custom Metasploit post module to executing a .NET Assembly from Meterpreter session☆346Updated 4 years ago
- Use CLR to inject all the .NET apps☆185Updated 4 years ago
- Constrained Language Mode + AMSI bypass all in one☆156Updated 5 years ago
- CScriptShell, a Powershell Host running within cscript.exe☆160Updated 8 years ago
- The PowerThIEf, an Internet Explorer Post Exploitation library☆130Updated last month
- Neutering Sysmon via driver unload☆227Updated 2 years ago
- BlueHatIL 2020 - Staying # and Bringing Covert Injection Tradecraft to .NET☆145Updated 5 years ago
- GhostBuild is a collection of simple MSBuild launchers for various GhostPack/.NET projects☆248Updated 4 years ago
- Shellcoding utilities☆222Updated 4 years ago