bitsadmin/nopowershell

A tool which bypasses AMSI (AntiMalware Scan Interface) and PowerShell CLM (Constrained Language Mode) and gives you a FullLanguage PowerShell reverse shell.

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

Covenant is a collaborative .NET C2 framework for red teamers.

A .NET Framework 4.0 Windows Agent

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

Cobalt Strike HTTPS beaconing over Microsoft Graph API

The Havoc Framework

Collection of Beacon Object Files (BOF) for Cobalt Strike

A list of useful Powershell scripts with 100% AV bypass (At the time of publication).