Stars
Six Degrees of Domain Admin
Nishang - Offensive PowerShell for red team, penetration testing and offensive security.
Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com
The Official USB Rubber Ducky Payload Repository
Red Teaming Tactics and Techniques
Privilege Escalation Enumeration Script for Windows
MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It ca…
The Official Bash Bunny Payload Repository
A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security audits purposes.
My musings with PowerShell
PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server
BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world.…
Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute
A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.
DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAR…
A post-exploitation powershell tool for extracting juicy info from memory.
A tool for checking if MFA is enabled on multiple Microsoft Services
Adversary Tactics - PowerShell Training
Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.
PowerShell MachineAccountQuota and DNS exploit tools
NetRipper - Smart traffic sniffing for penetration testers
SessionGopher is a PowerShell tool that uses WMI to extract saved session information for remote access tools such as WinSCP, PuTTY, SuperPuTTY, FileZilla, and Microsoft Remote Desktop. It can be r…
Powershell tool to automate Active Directory enumeration.
A Post-exploitation Toolset for Interacting with the Microsoft Graph API
RedSnarf is a pen-testing / red-teaming tool for Windows environments