PowerSploit - A PowerShell Post-Exploitation Framework

Six Degrees of Domain Admin

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It ca…

My musings with PowerShell

Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode

The goal of this repository is to document the most common techniques to bypass AppLocker.

PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities.

JAWS - Just Another Windows (Enum) Script

A post-exploitation powershell tool for extracting juicy info from memory.

PowerShell Pass The Hash Utils

A Powershell incident response framework

NetRipper - Smart traffic sniffing for penetration testers

RedSnarf is a pen-testing / red-teaming tool for Windows environments

Gets plaintext Active Directory credentials if you're on the internal network but outside the AD environment

A collection of Red Team focused tools, scripts, and notes

A PowerShell based utility for the creation of malicious Office macro documents.

The Elevate Kit demonstrates how to use third-party privilege escalation attacks with Cobalt Strike's Beacon payload.

A PowerShell Module Dedicated to Reverse Engineering

Kautilya - Tool for easy use of Human Interface Devices for offensive security and penetration testing.

Random Tools

Exploit the credentials present in files and memory

PowerShell Remote Download Cradle Generator & Obfuscator

A script for advanced discovery of Privileged Accounts - includes Shadow Admins

Socks proxy, and reverse socks server using powershell.

Exchange privilege escalations to Active Directory

PowerShell Obfuscation Detection Framework

A PowerShell script for helping to find vulnerable settings in AD Group Policy. (deprecated, use Grouper2 instead!)

PowerShell Script to Dump Windows Credentials from the Credential Manager