Flangvik

Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.

TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts

Retrieves exported functions from a legitimate DLL and generates a proxy DLL source code/template for DLL proxy loading or sideloading

Fork of SafetyKatz that dynamically fetches the latest pre-compiled release of Mimikatz directly from gentilkiwi GitHub repo, runtime patches signatures and uses SharpSploit DInvoke to PE-Load...

Loads any C# binary in mem, patching AMSI + ETW.

C# Azure Function with an HTTP trigger that generates obfuscated PowerShell snippets that break or disable AMSI for the current process.

Attempt at Obfuscated version of SharpCollection

Cobalt Strike External C2 Integration With Azure Servicebus, C2 traffic via Azure Servicebus

C# POC for CVE-2021-26855 aka ProxyLogon, supports the classically semi-interactive web shell as well as shellcode injection

AzureC2Relay is an Azure Function that validates and relays Cobalt Strike beacon traffic by verifying the incoming requests based on a Cobalt Strike Malleable C2 profile.

Bounces when a fish bites - Evilginx database monitoring with exfiltration automation

C# tool for installing a shared network printer abusing the PrinterNightmare bug to allow other network machines easy privesc!

Python utility that generates "imageless" QR codes in various formats

Modular C# framework to exfiltrate loot over secure and trusted channels.

Bof of RegPwn by MDSec

PowerShell script to generate "proxy" counterparts to easily perform DLL Sideloading

YouTube/Livestream project for obfuscating C# source code using Roslyn

C# port of the Get-AppLockerPolicy PS cmdlet

Python2 / BASH / VBS- UAC D&E Rubber Ducky