Popular repositories Loading A centralized resource for previously documented WDAC bypass techniques 667 85 A proof-of-concept Remote Desktop (RDP) session hijack utility C# 502 89 A collection of proof-of-concept source code and scripts for executing remote commands over WinRM using the WSMan.Automation COM object C++ 263 44 GhostBuild is a collection of simple MSBuild launchers for various GhostPack/.NET projects Python 252 48 A collection of various and sundry code snippets that leverage .NET dynamic tradecraft C# 145 17 Rogue Assembly Hunter is a utility for discovering 'interesting' .NET CLR modules in running processes. C# 120 10