Lists (15)
Starred repositories
54
stars
written in PowerShell
Clear filter
PowerSploit - A PowerShell Post-Exploitation Framework
Six Degrees of Domain Admin
Nishang - Offensive PowerShell for red team, penetration testing and offensive security.
BC-SECURITY / Empire
Forked from EmpireProject/EmpireEmpire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.
Red Teaming Tactics and Techniques
Privilege Escalation Enumeration Script for Windows
Automation for internal Windows Penetrationtest / AD-Security
A repository of sysmon configuration modules
PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server
Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab
BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world.…
PowerTools is a collection of PowerShell projects with a focus on offensive operations.
AutomatedLab is a provisioning solution and framework that lets you deploy complex labs on HyperV and Azure with simple PowerShell scripts. It supports all Windows operating systems from 2008 R2 to…
The goal of this repository is to document the most common techniques to bypass AppLocker.
DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAR…
A post-exploitation powershell tool for extracting juicy info from memory.
AADInternals PowerShell module for administering Azure AD and Office 365
Windows Local Privilege Escalation Cookbook
A list of useful Powershell scripts with 100% AV bypass (At the time of publication).
A PowerShell script anti-virus evasion tool
Dominate Active Directory with PowerShell.
Some usefull Scripts and Executables for Pentest & Forensics
Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)
Invoke-AtomicRedTeam is a PowerShell module to execute tests as defined in the [atomics folder](https://github.com/redcanaryco/atomic-red-team/tree/master/atomics) of Red Canary's Atomic Red Team p…
Microsoft signed ActiveDirectory PowerShell module
Cmd.exe Command Obfuscation Generator & Detection Test Harness
Configuration guidance for implementing collection of security relevant Windows Event Log events by using Windows Event Forwarding. #nsacyber