Stars
PowerSploit - A PowerShell Post-Exploitation Framework
Six Degrees of Domain Admin
Nishang - Offensive PowerShell for red team, penetration testing and offensive security.
Empire is a PowerShell and Python post-exploitation agent.
Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com
The Official USB Rubber Ducky Payload Repository
BC-SECURITY / Empire
Forked from EmpireProject/EmpireEmpire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.
Red Teaming Tactics and Techniques
Privilege Escalation Enumeration Script for Windows
MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It ca…
The Official Bash Bunny Payload Repository
A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security audits purposes.
My musings with PowerShell
PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server
BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world.…
Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute
A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.
DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAR…
PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities.
A post-exploitation powershell tool for extracting juicy info from memory.
A tool for checking if MFA is enabled on multiple Microsoft Services
Adversary Tactics - PowerShell Training
Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.
PowerShell MachineAccountQuota and DNS exploit tools
NetRipper - Smart traffic sniffing for penetration testers