Scripts to build a trimmed-down Windows 11 image.

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

Red Teaming Tactics and Techniques

The Official USB Rubber Ducky Payload Repository

Automation for internal Windows Penetrationtest / AD-Security

Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode

Some scripts useful for red team activities

Scripts to simplify setting up a Windows developer box

NetRipper - Smart traffic sniffing for penetration testers

PowerShell ReverseTCP Shell - Framework

Kautilya - Tool for easy use of Human Interface Devices for offensive security and penetration testing.

Random Tools

This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported is translated into a WMI-equivalent for use on a network/rem…

Install Linux from a running Windows system, without need for a live USB.

This Powershell script will generate a malicious Microsoft Office document with a specified payload and persistence method.

A Collection of Over 60 Scripts - updated specifically for the BadUSB function on the FlipperZero.

A collection of various vulnerable (mostly physical memory exposing) drivers.

Position Independent Windows Shellcode Written in C

For when you want a computer to be done - without admin!

lateral movement techniques that can be used during red team exercises

Collection of OPSEC Tradecraft and TTPs for Red Team Operations

PowerShell oneliner to retrieve wdigest passwords from the memory

A Rogue Device Detection Script with Email Alerts Functionality for Windows Subsystem

This repository was created to aid in the deployment/maintenance of the Sysmon service on a large number of computers.

Outlook persistence using VSTO add-ins

This script runs multithreading module that connects to a remote TCP server, monitors active (opened) Microsoft Word documents (.doc,.docx,etc') and extracting their text using Word application's C…