Popular repositories

1. SweetPotato

   Local Service to SYSTEM privilege escalation from Windows 7 to Windows 10 / Server 2019

   C# 673 115

2. SharpBlock

   A method of bypassing EDR's active projection DLL's by preventing entry point exection

   C# 549 85

3. BOF.NET

   A .NET Runtime for Cobalt Strike's Beacon Object Files

   C 278 32

4. MirrorDump

   Another LSASS dumping tool that uses a dynamically compiled LSA plugin to grab an lsass handle and API hooking for capturing the dump in memory

   C# 151 23

5. goreflect

   Reflective DLL loading of your favorite Golang program

   C 118 14

6. SylantStrike

   Simple EDR implementation to demonstrate bypass

   C 84 21