Lovely console emulator package for Windows

PowerSploit - A PowerShell Post-Exploitation Framework

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

Empire is a PowerShell and Python post-exploitation agent.

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

PowerShell script for automation of routine tasks done after fresh installations of Windows 10 / Server 2016 / Server 2019

Red Teaming Tactics and Techniques

Automation for internal Windows Penetrationtest / AD-Security

Privilege Escalation Enumeration Script for Windows

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It ca…

A repository of sysmon configuration modules

The Official Bash Bunny Payload Repository

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

A collection of scripts for assessing Microsoft Azure security

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world.…

Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute

A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAR…

A post-exploitation powershell tool for extracting juicy info from memory.

A tool for checking if MFA is enabled on multiple Microsoft Services

Sparrow.ps1 was created by CISA's Cloud Forensics team to help detect possible compromised accounts and applications in the Azure/m365 environment.

NetRipper - Smart traffic sniffing for penetration testers

Windows Exploits

PowerShell framework to assess Azure security

RedSnarf is a pen-testing / red-teaming tool for Windows environments

ConPtyShell - Fully Interactive Reverse Shell for Windows

A PowerShell script anti-virus evasion tool

Some usefull Scripts and Executables for Pentest & Forensics