PowerSploit - A PowerShell Post-Exploitation Framework

Six Degrees of Domain Admin

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

Empire is a PowerShell and Python post-exploitation agent.

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

Red Teaming Tactics and Techniques

PowerShell Obfuscator

Privilege Escalation Enumeration Script for Windows

A repository of sysmon configuration modules

My musings with PowerShell

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute

The goal of this repository is to document the most common techniques to bypass AppLocker.

PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities.

A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.

Re-play Security Events

A Powershell incident response framework

This repository is used for Windows client for IT Pro content on Microsoft Learn.

A tool for checking if MFA is enabled on multiple Microsoft Services

AADInternals PowerShell module for administering Azure AD and Office 365

RedSnarf is a pen-testing / red-teaming tool for Windows environments

A PowerShell based utility for the creation of malicious Office macro documents.

A PowerShell Module Dedicated to Reverse Engineering

Configuration guidance for implementing collection of security relevant Windows Event Log events by using Windows Event Forwarding. #nsacyber

Exploit the credentials present in files and memory

Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it wi…

PowerShell Remote Download Cradle Generator & Obfuscator

Tool to audit and attack LAPS environments

Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic Artifact Events for UEBA, Detect Exploitation events…