常见 C# 攻击性工具的每日构建，直接从各自 master 分支获取最新代码，使用 Azure DevOps 发布管道以 CDI 方式构建并发布。
找不到你喜欢的工具？欢迎提交 issue 或在 X 上私信我 @Flangvik 请注意，Cobalt Strike 的 execute-assembly 仅接受以 "Any CPU" 配置编译的二进制文件。
在实际交战中，我应该盲目部署这些二进制文件吗？ 当然不行，始终仔细检查你在客户端或网络上部署的任何内容。例如 https://github.com/dnSpyEx/dnSpy 从本仓库盲目部署任何内容应仅限于实验室环境、虚拟机、HackTheBox、检测映射等场景。
每天晚上 03:00，Azure DevOps 管道都会检查所有仓库 master 分支的新提交。发生变更的分支将被自动拉取，并使用不同的框架目标及架构进行编译，然后推送到本仓库。
管道可在这里找到： https://dev.azure.com/FlangvikDev/SharpRelease
图例： ✔️ = 积极构建中 | ❌ = 未构建 | ⚠️ = 管道存在但所有步骤已禁用
标记为
*的工具带有特殊说明 — 请参见表格下方的脚注。某些工具针对特定框架版本：Certify、KrbRelay、KrbRelayUp、ShadowSpray 针对 v4.7.2。ADCollector 针对 v4.6.1。
| 工具 \ .NET Framework | NET 4.0 | NET 4.5 | NET 4.7 |
|---|---|---|---|
ADCollector ¹ | ❌ | ❌ | ✔️ |
| ADCSPwn | ✔️ | ✔️ | ✔️ |
| ADFSDump | ✔️ | ✔️ | ✔️ |
| ADSearch | ❌ | ❌ | ✔️ |
AtYourService ² | ✔️ | ✔️ | ✔️ |
| BadAssMacros | ❌ | ✔️ | ✔️ |
| BetterSafetyKatz | ✔️ | ✔️ | ✔️ |
Certify ³ | ❌ | ❌ | ✔️ |
CheeseTools ⁴ | ❌ | ❌ | ✔️ |
| DeployPrinterNightmare | ✔️ | ✔️ | ✔️ |
| EDD | ✔️ | ✔️ | ✔️ |
Evasor ² | ✔️ | ✔️ | ✔️ |
| Farmer | ❌ | ❌ | ✔️ |
| ForgeCert | ❌ | ✔️ | ✔️ |
| GMSAPasswordReader | ❌ | ❌ | ✔️ |
| Group3r | ❌ | ✔️ | ✔️ |
| Grouper2 | ✔️ | ✔️ | ✔️ |
| Internal-Monologue | ✔️ | ✔️ | ✔️ |
| InveighZero | ⚠️ | ⚠️ | ⚠️ |
KrbRelay ³ | ❌ | ❌ | ✔️ |
KrbRelayUp ³ | ❌ | ❌ | ✔️ |
| LockLess | ✔️ | ✔️ | ✔️ |
| Moriarty | ❌ | ✔️ | ✔️ |
| PassTheCert | ✔️ | ✔️ | ✔️ |
| PurpleSharp | ❌ | ✔️ | ✔️ |
| Rubeus | ✔️ | ✔️ | ✔️ |
| RunasCs | ✔️ | ✔️ | ✔️ |
| SafetyKatz | ✔️ | ✔️ | ✔️ |
| SauronEye | ❌ | ❌ | ✔️ |
Scout ⁷ | ✔️ | ✔️ | ✔️ |
| SearchOutlook | ✔️ | ✔️ | ✔️ |
SharpSCOM ³ | ❌ | ❌ | ✔️ |
| Seatbelt | ✔️ | ❌ | ✔️ |
ShadowSpray ³ | ❌ | ❌ | ✔️ |
| Sharp-SMBExec | ✔️ | ✔️ | ✔️ |
| SharpADWS | ❌ | ❌ | ✔️ |
| SharpAllowedToAct | ✔️ | ✔️ | ✔️ |
| SharpAppLocker | ❌ | ✔️ | ✔️ |
SharpBlock ⁵ | ✔️ | ✔️ | ❌ |
| SharpBypassUAC | ✔️ | ✔️ | ✔️ |
| SharpChisel | ✔️ | ✔️ | ✔️ |
| SharpChrome | ✔️ | ✔️ | ✔️ |
| SharpChromium | ✔️ | ✔️ | ✔️ |
| SharpCloud | ✔️ | ✔️ | ✔️ |
| SharpCOM | ✔️ | ✔️ | ✔️ |
| SharpCookieMonster | ✔️ | ✔️ | ✔️ |
| SharpCrashEventLog | ✔️ | ✔️ | ✔️ |
| SharpDir | ✔️ | ✔️ | ✔️ |
SharpDoor ⁶ | ✔️ | ✔️ | ✔️ |
| SharpDPAPI | ✔️ | ✔️ | ✔️ |
| SharpDump | ✔️ | ✔️ | ✔️ |
| SharpEDRChecker | ✔️ | ✔️ | ✔️ |
| SharpExec | ✔️ | ✔️ | ✔️ |
| SharPersist | ✔️ | ✔️ | ✔️ |
| SharpFiles | ✔️ | ✔️ | ✔️ |
| SharpFinder | ✔️ | ✔️ | ✔️ |
| SharpGPOAbuse | ✔️ | ✔️ | ✔️ |
| SharpHandler | ✔️ | ✔️ | ✔️ |
| SharpHose | ❌ | ✔️ | ✔️ |
| SharpHound | ❌ | ❌ | ✔️ |
| SharpKatz | ✔️ | ✔️ | ✔️ |
| SharpKiller | ❌ | ✔️ | ✔️ |
| SharpLaps | ✔️ | ✔️ | ✔️ |
| SharpMapExec | ✔️ | ✔️ | ✔️ |
| SharpMiniDump | ✔️ | ✔️ | ✔️ |
| SharpMove | ✔️ | ✔️ | ✔️ |
| SharpNamedPipePTH | ✔️ | ✔️ | ✔️ |
| SharpNoPSExec | ❌ | ❌ | ✔️ |
| SharpPrinter | ❌ | ✔️ | ✔️ |
| SharpRDP | ❌ | ✔️ | ✔️ |
| SharpReg | ✔️ | ✔️ | ✔️ |
| SharpSCCM | ❌ | ❌ | ✔️ |
| SharpSearch | ✔️ | ✔️ | ✔️ |
| SharpSecDump | ✔️ | ✔️ | ✔️ |
| SharpShares | ✔️ | ✔️ | ✔️ |
| SharpSMBSpray | ✔️ | ✔️ | ✔️ |
| SharpSphere | ❌ | ✔️ | ✔️ |
| SharpSpray | ✔️ | ✔️ | ✔️ |
| SharpStay | ✔️ | ✔️ | ✔️ |
| SharpSuccessor | ✔️ | ✔️ | ✔️ |
| SharpSvc | ❌ | ❌ | ✔️ |
SharpSystemTriggers ⁸ | ⚠️ | ⚠️ | ⚠️ |
| SharpSniper | ✔️ | ✔️ | ✔️ |
| SharpSQLPwn | ✔️ | ✔️ | ✔️ |
| SharpTask | ✔️ | ✔️ | ✔️ |
| SharpTokenFinder | ❌ | ✔️ | ✔️ |
| SharpUp | ✔️ | ✔️ | ✔️ |
| SharpView | ❌ | ✔️ | ✔️ |
| SharpWMI | ✔️ | ✔️ | ✔️ |
| SharpWebServer | ✔️ | ✔️ | ✔️ |
| SharpWifiGrabber | ✔️ | ✔️ | ✔️ |
| SharpWSUS | ✔️ | ✔️ | ✔️ |
| SharpZeroLogon | ✔️ | ✔️ | ✔️ |
| Shhmon | ✔️ | ✔️ | ✔️ |
| Snaffler | ❌ | ✔️ | ❌ |
| SpoolSample | ✔️ | ✔️ | ✔️ |
| SqlClient | ✔️ | ✔️ | ✔️ |
| StandIn | ✔️ | ✔️ | ✔️ |
