PowerSploit - A PowerShell Post-Exploitation Framework

Six Degrees of Domain Admin

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

Empire is a PowerShell and Python post-exploitation agent.

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

Automation for internal Windows Penetrationtest / AD-Security

Privilege Escalation Enumeration Script for Windows

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It ca…

My musings with PowerShell

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server

HardeningKitty and Windows Hardening Settings

This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can be mitigated or detected.

Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode

netshell features all in version 2 powershell

A collection of scripts for assessing Microsoft Azure security

Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made w…

PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities.

Automation to assess the state of your M365 tenant against CISA's baselines

Adversary Tactics - PowerShell Training

PowerShell Pass The Hash Utils

Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

HardeningKitty - Checks and hardens your Windows configuration

AADInternals PowerShell module for administering Azure AD and Office 365

SessionGopher is a PowerShell tool that uses WMI to extract saved session information for remote access tools such as WinSCP, PuTTY, SuperPuTTY, FileZilla, and Microsoft Remote Desktop. It can be r…

RedSnarf is a pen-testing / red-teaming tool for Windows environments

Gets plaintext Active Directory credentials if you're on the internal network but outside the AD environment

PowerShell framework to assess Azure security

A collection of Red Team focused tools, scripts, and notes