Dependencies
A rewrite of the old legacy software "depends.exe" in C# for Windows devs to troubleshoot dll load dependencies issues.

https://github.com/lucasg/Dependencies
#reverse #csharp #windows

Writing custom backdoor payloads with C# (presented at Defcon 27)

This workshop aims to provide attendees hands-on experience on writing custom backdoor payloads using C# for the most common command and control frameworks including Metasploit, Powershell Empire and Cobalt Strike. The workshop consists in 7 lab exercises; each of the exercises goes over a different technique that leverages C# and .NET capabilities to obtain a reverse shell on a victim Windows host. The covered techniques include raw shellcode injection, process injection, process hollowing, runtime compilation, parent pid spoofing, antivirus bypassing, etc. At the end of this workshop attendees will have a clear understanding of these techniques both from an attack and defense perspective.

https://github.com/mvelazc0/defcon27_csharp_workshop

#csharp #backdoor #redteaming

WindowsRpcClients

This respository is a collection of C# class libraries which implement RPC clients for various versions of the Windows Operating System from 7 to Windows 10.

https://github.com/tyranid/WindowsRpcClients
#csharp #windows #rpc

OffensiveCSharp

This is a collection of C# tooling and POCs I've created for use on operations. Each project is designed to use no external libraries. Open each project's .SLN in Visual Studio and compile as "Release".

https://github.com/matterpreter/OffensiveCSharp
#tools #csharp #dotnet #windows

SharpSploit
SharpSploit is a .NET post-exploitation library written in C# that aims to highlight the attack surface of .NET and make the use of offensive .NET easier for red teamers.

https://github.com/cobbr/SharpSploit
#tools #csharp #redteaming #windows

Vanara

A set of .NET libraries for Windows implementing PInvoke calls to many native Windows APIs with supporting wrappers.

This project contains various .NET assemblies that contain P/Invoke functions, interfaces, enums and structures from Windows libraries. Each assembly is associated with one or a few tightly related libraries. For example, Shlwapi.dll has all the exported functions from shlwapi.lib; Kernel32.dll has all for both kernel32.lib and kernelbase.lib.

https://github.com/dahall/Vanara
#csharp #dotnet #winapi

SearchOutlook

A C# tool to search through a running instance of Outlook for keywords

https://github.com/RedLectroid/SearchOutlook
#tools #windows #csharp #redteaming