Kerberos unconstrained delegation abuse toolkit

A tool to help query AD via the LDAP protocol

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

Dump ntds.dit really fast

Journey so Far

Write-ups of machines/challenges I completed on Hack The Box, TryHackMe, VulnLab, and HashX while learning for exams like CPTS and OSEP.

A C# light executable that read Windows 11 Notes from TabState directory.

Porting of mimikatz sekurlsa::logonpasswords, sekurlsa::ekeys and lsadump::dcsync commands

This program is designed to demonstrate various process injection techniques

Run Rubeus via Rundll32

Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding "Shadow Credentials" to the target account.

Interract with Microsoft SQL Server (MS SQL) servers and their linked instances in restricted environments, without the need for complex T-SQL queries.

Simple C# implementation of PowerUpSQL

some command tools for OSEP exam

OpSec-safe Powershell runspace from within C# (aka SharpPick) with AMSI, Constrained Language Mode and Script Block Logging disabled at startup

DAFT: Database Audit Framework & Toolkit

Extracting Clear Text Passwords from mstsc.exe using API Hooking.

Small scripts that make life better

Hackish way to intercept and modify non-HTTP protocols through Burp & others.

A little bit less hackish way to intercept and modify non-HTTP protocols through Burp & others.

A PoC package for hosting the CLR and executing .NET from Go

Manipulating and Abusing Windows Access Tokens.

C# .Net Framework program that uses RunspaceFactory for Powershell command execution.

InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assembly execution as an alternative to Cobalt Strikes traditiona…

SharPyShell - tiny and obfuscated ASP.NET webshell for C# web applications

Command and Control Framework written in C#

Run a Exe File (PE Module) in memory (like an Application Loader)

C# Reflective loader for unmanaged binaries.

Also known by Microsoft as Knifecoat 🌶️