Tools

g0ldengunsec/powerpriv

A Powershell implementation of PrivExchange designed to run under the current user's context

logisek/huntcyberark

CyberArk Security Audit

cipolone95/cve-2019-1619

Powershell Script to build token for CVE-2019-1619

akefallonitis/larac2shell

Cross-platform interactive shell for Microsoft Defender for Endpoint Live Response

the-viper-one/psmapexec

Dominate Active Directory with PowerShell.

ka7ana/cve-2023-23397

PowerShell proof-of-concept for CVE-2023-23397 that exploits Outlook's ReminderSoundFile property to intercept Net-NTLMv2 hashes via SMB or WebDAV…

kevinjclark/invoke-linkspray

Powershell script to create malicious SMB or WebDAV links to steal NTLM authentication

hackplayers/evil-winrm

The ultimate WinRM shell for hacking/pentesting

n7on/dllspy

Discover input surfaces and security issues in compiled .NET assemblies — without running them.

blue0x1/nimrm

Native Nim WinRM shell with NTLM, Kerberos, file transfer, in-memory helpers, and AD/OPSEC reporting

rhymeswithmogul/set-zerologonmitigation

Protect your domain controllers against Zerologon (CVE-2020-1472).

kevin-robertson/invoke-thehash

PowerShell Pass The Hash Utils

gerenios/aadinternals

PowerShell module for administering and auditing Azure AD and Office 365, enabling token manipulation, user enumeration, and security assessments of…

61106960/adpeas

Powershell tool to automate Active Directory enumeration.

kevin-robertson/powermad

PowerShell MachineAccountQuota and DNS exploit tools

mzhmo/powershellkerberos

Some scripts to abuse kerberos using Powershell

mgeeky/azurert

AzureRT - A Powershell module implementing various Azure Red Team tactics

synacktiv/invoke-runaswithcert

A PowerShell script to perform PKINIT authentication with the Windows API from a non domain-joined machine.