Pinned Loading

1. CovenantTasks CovenantTasks Public

   Source for tasks I have used with Covenant

   C# 120 27

2. GetSystem GetSystem Public

   This is a C# implementation of making a process/executable run as NT AUTHORITY/SYSTEM. This is achieved through parent ID spoofing of almost any SYSTEM process.

   C# 104 26

3. OfficeMacro64 OfficeMacro64 Public

   This is a 64 bit VBA implementation of Christophe Tafani-Dereeper's original VBA code described in his blog @ https://blog.christophetd.fr/building-an-office-macro-to-spoof-process-parent-and-comma…

   VBA 19 6

4. PSEmp PSEmp Public

   C Sharp implementation of PowerShell Empire stage 1 (HTTPS) - Original work by Julio Ureña

   C# 2 3

5. retisRansomwareDecryptor retisRansomwareDecryptor Public

   This is a tool for decrypting files encrypted by the Retis ransomware ".crypted"

   C# 2