Stars
PowerSploit - A PowerShell Post-Exploitation Framework
Six Degrees of Domain Admin
Nishang - Offensive PowerShell for red team, penetration testing and offensive security.
Empire is a PowerShell and Python post-exploitation agent.
Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute
PowerTools is a collection of PowerShell projects with a focus on offensive operations.
A post-exploitation powershell tool for extracting juicy info from memory.
PowerShell Pass The Hash Utils
NetRipper - Smart traffic sniffing for penetration testers
Gets plaintext Active Directory credentials if you're on the internal network but outside the AD environment
A collection of Red Team focused tools, scripts, and notes
A PowerShell based utility for the creation of malicious Office macro documents.
A PowerShell Module Dedicated to Reverse Engineering
Kautilya - Tool for easy use of Human Interface Devices for offensive security and penetration testing.
PowerShell Obfuscation Detection Framework
GoFetch is a tool to automatically exercise an attack plan generated by the BloodHound application.
Powershell-based Windows Security Auditing Toolbox
PowerShell Script that generates a GUI/WinForms loaded with tons of functions
Tater is a PowerShell implementation of the Hot Potato Windows Privilege Escalation exploit from @breenmachine and @foxglovesec
PowerShell script for deobfuscating encoded PowerShell scripts
Powershell script to do domain auditing automation
A PowerShell script to interact with the MITRE ATT&CK Framework via its own API
DBC2 (DropboxC2) is a modular post-exploitation tool, composed of an agent running on the victim's machine, a controler, running on any machine, powershell modules, and Dropbox servers as a means o…
A collection of post-exploitation tools for network red teaming.
Excalibur is an Eternalblue exploit payload based "Powershell" for the Bashbunny project.
samyoyo / adaudit
Forked from phillips321/adauditPowershell script to do domain auditing automation
samyoyo / PowerLurk
Forked from Sw4mpf0x/PowerLurkMalicious WMI Events using PowerShell
samyoyo / fathomless
Forked from xor-function/fathomlessA collection of post-exploitation tools for network red teaming. (Migrating to Fathomless Project)