Empire is a PowerShell and Python post-exploitation agent.

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

Privilege Escalation Enumeration Script for Windows

A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.

Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made w…

SpoolSample -> Responder w/NetNTLM Downgrade -> NetNTLMv1 -> NTLM -> Kerberos Silver Ticket

Open source C2 server created for stealth red team operations

A post exploitation tool based on a web application, focusing on bypassing endpoint protection and application whitelisting

Socks proxy, and reverse socks server using powershell.

PowerShell Script to Dump Windows Credentials from the Credential Manager

PEN-300 collection to help you on your exam.

Powershell reverse shell using HTTP/S protocol with AMSI bypass and Proxy Aware

Simple & Powerful PowerShell Script Obfuscator

C2 Powershell Command & Control Framework with BuiltIn Commands

Automation library for Metasploit

Red Team PowerShell Script

PowerShell script helping Incident Responders discover potential adversary persistence mechanisms.

PowerRunAsSystem is a PowerShell script, also available as an installable module through the PowerShell Gallery, designed to impersonate the NT AUTHORITY/SYSTEM user and execute commands or launch …

Assist reverse tcp shells in post-exploration tasks

Audit Windows Security with best Practice

OSCP Cheatsheets

Transform your batch (bat) script into one binary.exe

My PowerShell bag of tricks

Steal Passwords From Sysvol (Group policy)

Utilizing MMF as a execution space for shell code

ACTIVE-DIRECTERY-Recorn-Tool

Windows Event Log Killer