Stars
PowerSploit - A PowerShell Post-Exploitation Framework
Six Degrees of Domain Admin
Nishang - Offensive PowerShell for red team, penetration testing and offensive security.
Empire is a PowerShell and Python post-exploitation agent.
Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com
K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetN…
Red Teaming Tactics and Techniques
Automation for internal Windows Penetrationtest / AD-Security
MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It ca…
My musings with PowerShell
A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server
Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode
PowerTools is a collection of PowerShell projects with a focus on offensive operations.
The goal of this repository is to document the most common techniques to bypass AppLocker.
PowerShell Pass The Hash Utils
SessionGopher is a PowerShell tool that uses WMI to extract saved session information for remote access tools such as WinSCP, PuTTY, SuperPuTTY, FileZilla, and Microsoft Remote Desktop. It can be r…
Gets plaintext Active Directory credentials if you're on the internal network but outside the AD environment
A PowerShell script anti-virus evasion tool
The Elevate Kit demonstrates how to use third-party privilege escalation attacks with Cobalt Strike's Beacon payload.
This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported is translated into a WMI-equivalent for use on a network/rem…
A script for advanced discovery of Privileged Accounts - includes Shadow Admins
Socks proxy, and reverse socks server using powershell.
Aggressor Script, Kits, Malleable C2 Profiles, External C2 and so on
A PowerShell TCP/IP swiss army knife.
Collection of PowerShell functions a Red Teamer may use in an engagement