Stars
PowerSploit - A PowerShell Post-Exploitation Framework
Nishang - Offensive PowerShell for red team, penetration testing and offensive security.
Empire is a PowerShell and Python post-exploitation agent.
Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com
Automation for internal Windows Penetrationtest / AD-Security
MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It ca…
A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security audits purposes.
My musings with PowerShell
PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server
PowerTools is a collection of PowerShell projects with a focus on offensive operations.
A post-exploitation powershell tool for extracting juicy info from memory.
SessionGopher is a PowerShell tool that uses WMI to extract saved session information for remote access tools such as WinSCP, PuTTY, SuperPuTTY, FileZilla, and Microsoft Remote Desktop. It can be r…
A collection of Red Team focused tools, scripts, and notes
PowerShell ReverseTCP Shell - Framework
Various PowerShell scripts that may be useful during red team exercise
Tool to audit and attack LAPS environments
ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.
PowerShell Remote Download Cradle Generator & Obfuscator
This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported is translated into a WMI-equivalent for use on a network/rem…
Open source C2 server created for stealth red team operations
A script for advanced discovery of Privileged Accounts - includes Shadow Admins
Microsoft Security Copilot is a generative AI-powered security solution that helps increase the efficiency and capabilities of defenders to improve security outcomes at machine speed and scale, whi…
A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
This function runs a number of checks on a system to help provide situational awareness to a penetration tester during the reconnaissance phase. It gathers information about the local system, users…
random powershell goodness
Tater is a PowerShell implementation of the Hot Potato Windows Privilege Escalation exploit from @breenmachine and @foxglovesec