Steven F

SharpRDP. Remote Desktop Protocol .NET Console Application for Authenticated Command Execution

MoveKit. Cobalt Strike kit for Lateral Movement

SharpStay. .NET project for installing Persistence

StayKit. Cobalt Strike kit for Persistence

SharpMove. .NET Project for performing Authenticated Remote Execution

Carseat. Python implementation of GhostPack's Seatbelt situational awareness tool

AssemblyHunter. Find .net assemblies locally

WMI_Proc_Dump. Dump processes over WMI with MSFT_MTProcess

PerfExec. C#

CleanRunMRU. Get or remove RunMRU values

reg_snake. Python tool to interact with WMI StdRegProv

rpc2wc. RPC to WebClient startup

FileWriter. .NET project for writing files to local or remote hosts

mtprocess. Python script to leverage MSFT_MTProcess WMI class

PowerView3-Aggressor. Cobalt Strike Aggressor script menu for Powerview/SharpView

SharpView. C# implementation of harmj0y's PowerView

CyberThreatIntel. Analysis of malware and Cyber Threat Intel of APT and cybercriminals groups

SharpChromium. .NET 4.0 CLR Project to retrieve Chromium data, such as cookies, history and saved logins.

aggressor-powerview. PowerView menu for Cobalt Strike

Empire. Empire is a PowerShell and Python post-exploitation agent.

core. Home repository for .NET Core