Lists (4)
Starred repositories
86
stars
written in PowerShell
Clear filter
Six Degrees of Domain Admin
Nishang - Offensive PowerShell for red team, penetration testing and offensive security.
Empire is a PowerShell and Python post-exploitation agent.
Pester is the ubiquitous test and mock framework for PowerShell.
A repository of sysmon configuration modules
My musings with PowerShell
Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode
This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can be mitigated or detected.
A collection of scripts for assessing Microsoft Azure security
Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab
BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world.…
Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute
AutomatedLab is a provisioning solution and framework that lets you deploy complex labs on HyperV and Azure with simple PowerShell scripts. It supports all Windows operating systems from 2008 R2 to…
Place to store our documentation, code samples, etc for public consumption.
Adversary Tactics - PowerShell Training
Sparrow.ps1 was created by CISA's Cloud Forensics team to help detect possible compromised accounts and applications in the Azure/m365 environment.
PowerShell framework to assess Azure security
A PowerShell based utility for the creation of malicious Office macro documents.
SkyArk helps to discover, assess and secure the most privileged entities in Azure and AWS
SpoolSample -> Responder w/NetNTLM Downgrade -> NetNTLMv1 -> NTLM -> Kerberos Silver Ticket
Powershell Based tool for gathering information related to O365 intrusions and potential Breaches
A PowerShell Module Dedicated to Reverse Engineering
Exploit the credentials present in files and memory
PowerShell Remote Download Cradle Generator & Obfuscator
A script for advanced discovery of Privileged Accounts - includes Shadow Admins
A Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365
PowerShell Obfuscation Detection Framework