PowerSploit - A PowerShell Post-Exploitation Framework

Six Degrees of Domain Admin

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

Empire is a PowerShell and Python post-exploitation agent.

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com

game of active directory

A tool which is uses to remove Windows Defender in Windows 8.x, Windows 10 (every version) and Windows 11.

Repository for my flipper zero badUSB payloads. Now almost entirely plug and play.

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

PowerShell Obfuscator

Privilege Escalation Enumeration Script for Windows

A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security audits purposes.

Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode

This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can be mitigated or detected.

A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.

Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made w…

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAR…

JAWS - Just Another Windows (Enum) Script

PowerShell Pass The Hash Utils

ConPtyShell - Fully Interactive Reverse Shell for Windows

My collection of battle-tested Aggressor Scripts for Cobalt Strike 4.0+

Cmd.exe Command Obfuscation Generator & Detection Test Harness

ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.

A script for advanced discovery of Privileged Accounts - includes Shadow Admins

A repository for additional files related to the book Windows Security Internals with PowerShell from No Starch Press.