xorrior / Random-CSharpTools
Collection of CSharp Assemblies focused on Post-Exploitation Capabilities
☆224Updated 5 years ago
Alternatives and similar repositories for Random-CSharpTools:
Users that are interested in Random-CSharpTools are comparing it to the libraries listed below
- ☆278Updated 4 years ago
- Lateral Movement technique using DCOM and HTA☆231Updated 2 years ago
- dem sharp donuts☆188Updated 2 years ago
- A Bring Your Own Land Toolkit that Doubles as a WMI Provider☆285Updated 6 years ago
- SharpCompile is an aggressor script for Cobalt Strike which allows you to compile and execute C# in realtime. This is a more slick approa…☆291Updated 4 years ago
- CScriptShell, a Powershell Host running within cscript.exe☆160Updated 7 years ago
- MSBuildShell, a Powershell Host running within MSBuild.exe☆284Updated 5 years ago
- DEPRECATED SharpRoast is a C# port of various PowerView's Kerberoasting functionality.☆254Updated 6 years ago
- ☆350Updated 3 years ago
- The PowerThIEf, an Internet Explorer Post Exploitation library☆131Updated 6 years ago
- RedPeanut is a small RAT developed in .Net Core 2 and its agent in .Net 3.5 / 4.0.☆328Updated last year
- The project is designed as a file resource cloner. Metadata, including digital signature, is extracted from one file and injected into a…☆340Updated 3 months ago
- Constrained Language Mode + AMSI bypass all in one☆156Updated 5 years ago
- a tool to make it easy and fast to test various forms of injection☆172Updated 5 years ago
- Powershell script for enumerating vulnerable DCOM Applications☆256Updated 6 years ago
- A proof of concept for dynamically loading .net assemblies at runtime with only a minimal convention pre-knowledge☆162Updated 6 years ago
- Use CLR to inject all the .NET apps☆183Updated 3 years ago
- ☆179Updated 3 years ago
- ☆238Updated 6 years ago
- Adds a user-mode asynchronous procedure call (APC) object to the APC queue of the specified thread and spoof the Parent Process.☆156Updated 5 years ago
- A tool to run .Net DLLs from the command line☆102Updated 6 years ago
- ** DISCONTINUED ** C2 framework that uses Background Intelligent Transfer Service (BITS) as communication protocol and Direct Syscalls + …☆216Updated 2 years ago
- GhostBuild is a collection of simple MSBuild launchers for various GhostPack/.NET projects☆247Updated 4 years ago
- PowerShell and Cobalt Strike scripts for lateral movement using Excel 4.0 / XLM macros via DCOM (direct shellcode injection in Excel.exe)☆321Updated 5 years ago
- Create a minidump of the LSASS process from memory☆256Updated 2 years ago
- A proof-of-concept subject interface package (SIP) used to demonstrate digital signature subversion attacks.☆95Updated 7 years ago
- ☆229Updated 6 years ago
- Evading WinDefender ATP credential-theft☆254Updated 5 years ago
- A library for integrating communication channels with the Cobalt Strike External C2 server☆283Updated 7 years ago
- CSHARP DCOM Fun☆127Updated 5 years ago