
OffensiveCSharp
Collection of Offensive C# Tooling

Collection of Offensive C# Tooling

SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.

Load/Inject .NET assemblies by; reusing the host (spawnto) process loaded CLR AppDomainManager, Stomping Loader/.NET assembly PE DOS headers,…

Toolbox containing research notes & PoC code for weaponizing .NET's DLR

RustyWater represents the main payload and the backbone of the entire adversarial operation in Static Kitten group attacks.

Static security scanner for AI agent skill packages. Detects malicious SKILL.md files and bundled scripts before they run.

"In-depth reverse engineering analysis of an advanced multi-phase loader targeting Shellhost.exe, amsi.dll, mstscax.dll, and clbcatq.dll using module…