Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com

game of active directory

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It ca…

netshell features all in version 2 powershell

Remote Desktop entirely coded in PowerShell.

A post-exploitation powershell tool for extracting juicy info from memory.

Re-play Security Events

Azure Security Resources and Notes

A tool for checking if MFA is enabled on multiple Microsoft Services

Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

Powershell tool to automate Active Directory enumeration.

A list of useful Powershell scripts with 100% AV bypass (At the time of publication).

A PowerShell script anti-virus evasion tool

The Shadow Attack Framework

My collection of battle-tested Aggressor Scripts for Cobalt Strike 4.0+

Misconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive and hardening guidance.

Invoke-AtomicRedTeam is a PowerShell module to execute tests as defined in the [atomics folder](https://github.com/redcanaryco/atomic-red-team/tree/master/atomics) of Red Canary's Atomic Red Team p…

Various PowerShell scripts that may be useful during red team exercise

Kautilya - Tool for easy use of Human Interface Devices for offensive security and penetration testing.

PowerShell Remote Download Cradle Generator & Obfuscator

Socks proxy, and reverse socks server using powershell.

Red Team Scripts by d0nkeys (ex SnadoTeam)

PowerShell module to check if a Windows binary (EXE/DLL) has been compiled with ASLR, DEP, SafeSEH, StrongNaming, and Authenticode.

A deliberately vulnerable Microsoft Entra ID environment. Learn identity security through hands-on, realistic attack challenges.

Powershell reverse shell using HTTP/S protocol with AMSI bypass and Proxy Aware

Aggressor Script, Kits, Malleable C2 Profiles, External C2 and so on

Collection of useful PowerShell functions, scripts, snippets and templates

Active Directory Auditing and Enumeration