Chinedu Onwukike

CovenantTasks. Source for tasks I have used with Covenant

GetSystem. This is a C# implementation of making a process/executable run as NT AUTHORITY/SYSTEM. This is achieved through parent ID spoofing of almost any SYSTEM process.

OfficeMacro64. This is a 64 bit VBA implementation of Christophe Tafani-Dereeper's original VBA code described in his blog @ https://blog.christophetd.fr/building-an-office-macro-to-spoof-process-parent-and-command-line/

SharpTools. Public tools already compiled in C#

binance-mcp. Binance MCP Server

PSEmp. C Sharp implementation of PowerShell Empire stage 1 (HTTPS) - Original work by Julio Ureña

retisRansomwareDecryptor. This is a tool for decrypting files encrypted by the Retis ransomware ".crypted"